Privacy Policy

1. Introduction

Z-Image-Turbo AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI image generation platform.

By using Z-Image-Turbo AI, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Full name (optional)
• Password (encrypted and never stored in plain text)
• Profile picture/avatar (optional)

2.2 Content Data

To provide our image generation services, we collect and process:

• Text prompts you provide for image generation
• Configuration settings (guidance scale, seed, etc.)
• Generated image outputs

2.3 Usage Data

We automatically collect certain information about your use of the Service:

• Image generation history and timestamps
• Credit usage and transaction records
• Browser type and version
• IP address and geographic location
• Device information and operating system
• Pages visited and features used
• Time spent on the platform

2.4 Payment Information

Payment processing is handled by PayPal. We do not store your credit card details or payment information on our servers. We only receive transaction confirmations and receipts from PayPal.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process your prompts and generate images
• Account Management: To create and maintain your user account
• Payment Processing: To handle credit purchases and transactions
• Customer Support: To respond to your inquiries and provide assistance
• Service Improvement: To analyze usage patterns and improve our platform
• Security: To detect and prevent fraud, abuse, and security threats
• Communications: To send service-related notifications and updates
• Legal Compliance: To comply with legal obligations and protect our rights

4. Data Storage and Security

4.1 Storage Infrastructure

Your data is stored using Supabase, a secure cloud database and storage platform. All data is encrypted at rest and in transit using industry-standard encryption (AES-256).

4.2 Data Retention

• Account Data: Retained while your account is active
• Generated Images: Automatically deleted after 30 days
• Transaction Records: Retained for 7 years for tax and legal compliance
• Usage Logs: Retained for 90 days for analytics and security

4.3 Security Measures

• End-to-end encryption for data transmission
• Secure authentication using industry-standard protocols
• Regular security audits and updates
• Access controls and permission management
• Automated backup systems
• DDoS protection and firewall security

5. Data Sharing and Third Parties

5.1 Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Database and file storage (privacy policy: supabase.com/privacy)
• PayPal: Payment processing (privacy policy: paypal.com/privacy)
• Vercel: Hosting and deployment (privacy policy: vercel.com/legal/privacy-policy)

5.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights or the safety of others.

6. Your Rights and Choices

6.1 Access and Correction

You have the right to access and update your account information at any time through your profile settings.

6.2 Data Portability

You can export your data by downloading your generated images from your dashboard.

6.3 Account Deletion

You may delete your account at any time. Upon deletion:

• Your account will be immediately deactivated
• All personal data will be deleted within 30 days
• Transaction records will be retained for legal compliance
• Unused credits are non-refundable

6.4 Communication Preferences

You can opt out of marketing emails by clicking the unsubscribe link. Note that you will still receive essential service-related notifications.

7. Cookies and Tracking

7.1 Essential Cookies

We use essential cookies required for:

• User authentication and session management
• Security and fraud prevention
• Site functionality and preferences

7.2 Analytics

We may use analytics tools to understand how users interact with our Service. This helps us improve user experience and platform performance.

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

10. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit how we use your personal data
• Right to Object: Object to processing of your personal data
• Right to Data Portability: Receive your data in a structured format

11. CCPA Compliance (California Users)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to delete personal information
• Right to non-discrimination for exercising CCPA rights

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you within 72 hours via email and provide details about the breach, its impact, and steps we are taking to address it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: