Privacy Policy

1. Scope and Who We Are

This Privacy Policy explains how the operator doing business as Visual Maker AI ("Visual Maker AI," "we," "us," or "our") collects, uses, discloses, and protects personal data when you use visualmakerai.com, our AI image and video tools, prompt gallery, account, payment, storage, and related services (the "Services").

For privacy questions or requests, contact support@visualmakerai.com or use our contact page. Visual Maker AI is the service operator and data controller for the processing described in this Policy unless another entity is identified at the point of collection.

2. Personal Data We Collect

Depending on how you use the Services, we collect:

• Account data: name, email address, profile image, user ID, login method, email-verification status, role, and account settings. Passwords are stored as secure hashes. If you use Google sign-in, we receive permitted profile information and authentication identifiers, not your Google password.
• User Content: prompts, reference images, uploaded files, edit instructions, generated images or videos, generation settings and history, sharing choices, favorites, and content reports.
• Payment and credit data: selected product, price, currency, order, customer, invoice, subscription and transaction identifiers, payment status, billing period, credit balance, and credit usage history. Payment providers process full payment-card or payment-account details; we generally do not receive or store those full details.
• Communications: support messages, contact-form submissions, feedback, and records of communications with us.
• Device and usage data: IP address, browser and device type, operating system, referring pages, pages and features used, timestamps, language and theme preferences, cookie identifiers, diagnostic data, and security logs.
• Public content: profile information and User Content you choose to make public, including content submitted to the prompt gallery.

Please do not include government identifiers, financial-account details, health information, precise location, passwords, confidential business data, or other sensitive personal data in prompts or uploads unless it is necessary, lawful, and you have authority to provide it.

3. Sources of Personal Data

We collect data directly from you, automatically from your device and use of the Services, and from service providers such as authentication and payment providers. We may also receive data from another user if they share content or submit a rights or safety report involving you.

4. How and Why We Use Personal Data

We use personal data to:

• create and secure accounts, authenticate users, and provide the Services;
• process prompts and files, generate content, save history, and apply your public-sharing choices;
• calculate, charge, grant, consume, restore, and audit credits and payments;
• provide support and send transactional, security, and service messages;
• detect fraud, abuse, prohibited content, security incidents, and technical failures;
• debug, analyze, maintain, and improve performance and user experience;
• enforce our terms, protect users and rights, and comply with legal requests; and
• send marketing communications only where permitted and allow you to opt out.

Where the GDPR or similar law applies, our legal bases are:

• Contract: processing needed to create your account, generate content, store requested files, provide credits, and process purchases;
• Legitimate interests: securing and improving the Services, preventing fraud and abuse, providing support, and protecting legal rights, balanced against your rights;
• Consent: optional analytics, non-essential cookies, or marketing where consent is required; and
• Legal obligation: tax, accounting, sanctions, fraud-prevention, and other compliance requirements.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

5. AI Processing and Model Providers

To generate content, we send the prompt, relevant settings, and any selected reference files to the model provider configured for that request. Depending on the selected model and current configuration, providers may include fal.ai, API Mart, or KIE.ai. The provider returns a generated result or a temporary result URL, which we may copy to our storage.

We do not use private User Content to train AI models operated by Visual Maker AI. Third-party model providers process data under their own terms and privacy practices, which may include independent retention periods. Do not submit sensitive or confidential content unless you have assessed those providers and the transfer is appropriate for your use case.

AI safety and public-gallery moderation may involve automated checks and human review. We do not use automated decision-making that produces legal or similarly significant effects about you.

6. Content Moderation, Enforcement, and Reporting

Platform Content Moderation Mechanism

We use automated safety checks and human review to identify prompts, uploads, generated content, provider responses, and public-gallery submissions that may violate our AI Content Use Policy, applicable law, or the rights and safety of others. Automated checks may block a generation request or flag it for review. Public-gallery content is reviewed before it is featured or otherwise promoted, and we may review content after publication when it is flagged by our systems, reported by a user, or raised through a support request.

Enforcement Actions for Violations

Based on the severity, risk, and history of a violation, we may block or cancel a generation request; remove, unpublish, or restrict access to content; withhold or reverse public-gallery rewards; limit product features; suspend or terminate an account; preserve relevant records; or report conduct to competent authorities where legally required. Repeated, evasive, or serious violations may result in permanent account termination. See our AI Content Use Policy for the complete rules and appeal process.

User Reporting Channel and Handling Process

You may report suspected illegal, infringing, non-consensual, or dangerous content through our contact page or at support@visualmakerai.com. Please include the URL or content ID, the reason for your report, supporting information, and how we may contact you. We assess good-faith reports, review the available content and context, may request additional information, and may make content unavailable while we investigate. We retain report and review records only as needed for safety, abuse prevention, legal compliance, and dispute handling.

7. When We Disclose Personal Data

We disclose personal data only as reasonably necessary to:

• Infrastructure and storage providers, including Cloudflare, which hosts the application, database, workflows, and object storage;
• AI model providers, as described above;
• Payment providers, such as Waffo Pancake, Stripe, or Creem, depending on the checkout option in use;
• Authentication providers, such as Google when you choose social sign-in;
• Email and communication providers, such as Cloudflare Email, Resend, Discord, or Feishu when configured for service email or operational notices;
• Analytics providers, which may include Google Analytics, Microsoft Clarity, Plausible, or Umami only when the relevant service is enabled;
• Professional advisers and authorities when reasonably necessary to comply with law, respond to valid legal process, prevent harm, or protect rights; and
• A successor organization in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the business, subject to appropriate confidentiality and notice requirements.

We do not sell personal data. We do not share personal data for cross-context behavioral advertising as those terms are defined by California law. We do not permit service providers to use personal data for their own marketing merely because they process it for us.

8. Public Content

If you choose to make an Output, prompt, profile, or other content public, it may be viewed, copied, indexed, or reshared by anyone. Removing it from Visual Maker AI does not remove copies already made by others or search-engine caches. Review content carefully before publishing it.

9. Cookies and Analytics

We use necessary cookies and local storage for sign-in, security, language, theme, interface state, and core operation. If enabled, analytics services may use cookies or similar technologies to measure traffic and product usage. See our Cookie Policy for more information and available controls.

Analytics integrations are disabled unless they are configured. Before enabling non-essential cookies where prior consent is required, we will provide an appropriate consent control. You can also control cookies through your browser, although blocking necessary cookies may prevent account and other core features from working. Browser "Do Not Track" signals are not uniformly standardized; where legally required, we honor recognized opt-out preference signals.

10. International Data Transfers

We and our service providers may process personal data in countries other than where you live. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for restricted transfers, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. You may contact us for information about safeguards applicable to your data.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain security and audit records, resolve disputes, and meet tax, accounting, and legal obligations. Retention depends on the type of data, your settings, the status of your account, legal limitation periods, and backup cycles.

Account and User Content generally remain while your account is active unless you delete specific content. Payment, credit, fraud-prevention, and legal records may be kept after account deletion when required by law or needed to establish, exercise, or defend legal claims. Public content may remain as described above. Temporary files held by model providers are subject to their retention practices.

Using the account-deletion control removes account-linked database records. For deletion of residual files, backups, payment records not eligible for immediate deletion, or data held by a provider, send a privacy request so we can assess and complete the request where required.

12. Data Security

We use reasonable administrative, technical, and organizational safeguards, including access controls, authenticated sessions, transport encryption where supported, file validation, and separated service credentials. No service can guarantee absolute security. You are responsible for using a strong unique password, protecting API keys, and signing out of devices you do not control.

13. Your Privacy Rights

Depending on your location, you may have the right to:

• know whether and how we process your personal data;
• access and receive a copy of personal data;
• correct inaccurate or incomplete data;
• delete personal data;
• restrict or object to certain processing;
• receive portable data you provided in a structured format;
• withdraw consent and opt out of marketing;
• appeal a refusal of a privacy request; and
• complain to your local data-protection authority.

California residents may also request the categories and specific pieces of personal information collected, the sources, purposes, and categories of recipients, and may exercise applicable rights without discriminatory treatment. Because we do not sell or share personal information for cross-context behavioral advertising, there is no such sale or sharing to opt out of under our current practices.

You can update certain account data or delete your account in Settings. For other requests, email support@visualmakerai.com from the email associated with your account and describe the request. We may verify your identity and authority before responding. Authorized agents may submit requests where permitted by law. We will respond within the period required by applicable law.

14. Children's Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

15. Third-Party Links

The Services may link to third-party sites or services. Their privacy practices are governed by their own notices, not this Policy. Review those notices before providing personal data.

16. Changes to This Policy

We may update this Policy as the Services, providers, or law change. We will post the updated version and change the date above. For material changes, we will provide reasonable additional notice, such as an in-product or email notice, before the change takes effect where required.

17. Contact Us

Privacy requests and questions may be submitted through our contact page or by email to support@visualmakerai.com.