Privacy Policy
Last updated 1 October 2026
The short version: we collect what we need to run your account and your generations, we never sell your data, your private content stays private, and you can ask us to export or delete it at any time.
Who we are
AIconic Studio (“we”) runs this website and the AIconic Studio app. We decide how your personal data is used for the Service and we are responsible for it. Contact us about privacy at [email protected].
What we collect
- Account data: your name, email address, a securely hashed password, or the basic profile your sign-in provider shares if you sign in with Google. Also your agreement to our Terms and the date of it.
- Your content: photos, videos, LoRAs and other models you upload, prompts and settings, and the images and videos you generate.
- Usage and billing: the workflows you run, credits used, plan, and payment records once payments are live (card details stay with the payment provider).
- Technical data: IP address, browser and device type, logs and error reports needed to keep the Service secure and working.
- Messages: what you send us by email or support.
Photos of faces are sensitive. We process them only to provide the features you ask for, such as training your character, and never to identify you or anyone else.
How we use it
- To run the Service: create your account, train your models, run your generations and store your results.
- To keep it safe: prevent abuse, enforce our content rules (including checks for illegal content) and secure accounts.
- To bill you and manage credits and plans.
- To talk to you: confirmation and security emails, service notices and, if you agree, product news.
- To improve the Service: performance, reliability and which features are used, mostly in aggregate.
- To meet legal obligations.
We do not sell your personal data, and your private uploads and generations are not shown to other users.
Legal bases
Where data protection law (such as the GDPR) requires a legal basis, we rely on:
- Contract: to provide the Service you signed up for.
- Consent: for optional emails and for 18+ features you switch on; you can withdraw it at any time.
- Legitimate interests: security, fraud prevention and improving the Service.
- Legal obligation: tax records and lawful requests from authorities.
Who processes it
We use trusted providers who process data for us under contract, only as needed for their part of the Service:
- GPU cloud (such as RunPod and Vast.ai) runs model training and generation.
- Cloudflare provides storage, content delivery and network security.
- AI model providers: some models run through external APIs. When you choose one, your prompt and the inputs it needs are sent to that provider to create the output.
- Email delivery for account and security messages.
- Payment provider for subscriptions and credits, once payments are live.
We may also share data when the law requires it, to protect people from harm (including reporting child sexual abuse material), or as part of a sale or merger of the business, in which case this policy continues to apply.
International transfers
Our providers run servers in several countries, including in the EU and the US. When data moves across borders we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.
How long we keep it
- Account data and your content: while your account is open.
- After you delete content or your account: removed from active systems within 30 days, and from backups when they rotate out.
- Billing records: as long as tax law requires.
- Security logs: for a limited period, then deleted or anonymised.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, to restrict or object to some processing, and to withdraw consent. Email [email protected] from the address on your account and we reply within 30 days. You can also complain to your local data protection authority.
Security
We use encryption in transit, hashed passwords, access controls and separation between accounts’ content. No system is perfectly secure; if a breach affects your data, we tell you and the authorities as the law requires.
Cookies and local storage
This website does not use advertising or tracking cookies. It stores your answer to the 18+ and Terms prompt in your browser’s local storage, so you are not asked on every visit. The app uses essential cookies or storage to keep you signed in. If we add analytics, we will update this section and ask for consent where required.
Adults only
The Service is for people aged 18 and over. We do not knowingly collect data from anyone younger and delete it when we find it.
Changes to this policy
We update this policy as the Service changes. The date at the top shows the latest version, and we tell you in the app or by email about significant changes.
Questions about this page: [email protected]