Privacy Policy

Last updated: September 12, 2026

Information we store

This service stores your email address and account profile. Google sign-in also supplies a Google account identifier and profile picture. Email sign-in stores a salted password hash, never your plaintext password. Confirmation and password reset links use expiring tokens; only their hashes are stored. This service also stores provider settings, generation tasks, and results associated with your account.

Provider credentials

API credentials you enter for ByteDance, BytePlus, Alibaba Cloud, or DashScope are encrypted before they are stored in our database. They are decrypted only when the service needs to call the provider on your behalf. Credentials are never included in task responses or application logs.

How information is used

Account information is used to authenticate you and keep your settings and tasks separate from other users. Provider credentials and submitted prompts are used only to perform the requests you initiate.

Sharing and retention

Information is shared with the selected media provider only as required to perform a request. We do not sell personal information. Data is retained while this development service is operating or until deletion is requested.

When email delivery is enabled, Resend processes recipient addresses and authentication emails to deliver confirmation and password reset links. Your password is never included in these emails.

Contact and deletion requests

To request access to or deletion of your account data and stored credentials, contact the service administrator.