Privacy Policy

Information we collect

We collect account information such as your name, email address, login provider, and verification status; billing identifiers and purchase history supplied by Stripe; projects, prompts, uploads, generated outputs, collaboration activity, and preferences you choose to store; and technical information such as browser type, approximate network location, device identifiers, diagnostic logs, and security events.

How we use information

• Provide, secure, troubleshoot, and improve AIGalaxy.
• Process generations, uploads, collaboration, purchases, subscriptions, and credit balances.
• Authenticate users, prevent fraud and abuse, and enforce service limits.
• Communicate service, security, billing, and support information.
• Comply with law and protect users, AIGalaxy, and the public.

AI content and service providers

Prompts, inputs, and related settings are sent to the generation provider selected for an operation so it can return the requested output. We also use infrastructure, storage, email, analytics, authentication, and payment providers to operate the service. These providers process information under their own terms and our contractual instructions where applicable.

Google account data

Basic Google sign-in requests only your OpenID identifier, name, profile image, and email address. If you separately connect Google document access, AIGalaxy uses the granted access only to import the documents you ask it to process, provide that user-facing feature, and maintain or improve the feature in a manner visible to you. We do not use Google user data for advertising, sell it, or allow humans to read it except with your affirmative permission, for security or abuse investigation, or when required by law. You can revoke access from your Google Account at any time.

Payments

Stripe processes payment-card and billing information. AIGalaxy receives transaction identifiers, status, amount, currency, customer identifiers, and limited billing details, but does not store complete card numbers.

Sharing

We share information with service providers as needed to operate AIGalaxy, with collaborators you invite or people with whom you intentionally share content, in a business transfer, when legally required, or when necessary to protect rights and safety. We do not sell personal information.

Retention and security

We keep information while your account is active and as reasonably needed for the purposes above, legal obligations, dispute resolution, fraud prevention, and backups. We use access controls, encryption in transit, credential hashing, scoped provider access, and operational monitoring. No system can guarantee absolute security.

Signed-in media marked Backed up has completed validation, private encrypted storage, checksum verification, and secondary replication. We operate that media to a recovery-point objective of no more than 15 minutes and a recovery-time objective of no more than four hours. Items marked Local only, Securing, or Sync failed have not completed that durability process. These objectives are measured service targets, not a guarantee that loss or unauthorized access can never occur.

Deleting protected media immediately revokes ordinary access and active shares, then places the object in recoverable trash for 30 days. Primary versions are purged after that period and secondary backup copies within a further 30 days, unless a documented legal hold or law requires longer retention. Security scanning may inspect uploads for malicious, malformed, or deceptive content before they are released from quarantine.

Your choices and rights

You may update account information, disconnect providers, manage billing, export or delete content where the product offers those controls, and request access, correction, deletion, or portability when applicable. Local law may provide additional rights and an appeal process.

Children

AIGalaxy is not directed to children under 13, or the higher minimum age required in their jurisdiction. We do not knowingly collect personal information from children.

International processing and changes

Information may be processed in countries other than your own, subject to applicable safeguards. We may update this policy as the service evolves and will post the new date and provide additional notice when required.

Contact

For privacy requests or questions, email support@avatarlabs.dev.