Privacy Policy

Last updated: August 19, 2025

1. Introduction

At Flux Context, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI image generation service.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, and profile picture (when using social login)
  • Content: Images you upload, prompts you enter, and images you generate
  • Payment Information: Processed securely through Stripe (we don't store card details)
  • Communications: Feedback, support requests, and other communications

2.2 Information Collected Automatically

  • Usage Data: Features used, generation history, credits consumed
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, pages viewed
  • Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

  • OAuth Providers: Basic profile information from Google when you use social login
  • Payment Processors: Transaction status and subscription information from Stripe

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our Service
  • Process your image generation requests
  • Manage your account and subscriptions
  • Process payments and prevent fraud
  • Send service-related communications
  • Improve and optimize our Service
  • Develop new features and functionality
  • Comply with legal obligations
  • Protect against misuse and enforce our Terms

4. Data Storage and Security

4.1 Where We Store Data

  • User data is stored in secure databases (Supabase/PostgreSQL)
  • Generated images are stored in secure cloud storage (AWS S3/Cloudflare R2)
  • All data is encrypted in transit and at rest

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

  • SSL/TLS encryption for all data transmissions
  • Secure authentication with OAuth 2.0
  • Regular security audits and updates
  • Access controls and employee training
  • Secure payment processing through PCI-compliant providers

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

  • AI Model Providers: Image generation requests (without personal info)
  • Payment Processors: Stripe for payment processing
  • Email Services: Resend for transactional emails
  • Analytics: Aggregated usage data for service improvement

5.2 Legal Requirements

We may disclose information when required by law, court order, or to:

  • Comply with legal obligations
  • Protect our rights and property
  • Prevent fraud or illegal activities
  • Protect user safety

6. Your Rights and Controls

You have the following rights regarding your personal information:

6.1 Access and Portability

You can access and download your data, including:

  • Account information
  • Generated images
  • Usage history

6.2 Correction and Deletion

  • Update your account information at any time
  • Delete individual generated images
  • Request complete account deletion

6.3 Communication Preferences

  • Opt out of marketing emails
  • Manage notification preferences
  • Control cookie settings

7. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

  • Active Accounts: Data retained while account is active
  • Generated Images: Stored until you delete them or close your account
  • Deleted Accounts: Personal data deleted within 30 days
  • Legal Requirements: Some data may be retained longer for legal compliance
  • Anonymized Data: May be retained indefinitely for analytics

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Children's Privacy

Our Service is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing any information.

11. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Understand usage patterns and improve our Service

You can control cookies through your browser settings, but disabling certain cookies may limit functionality.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For data protection inquiries or to exercise your rights, please email us with "Data Protection Request" in the subject line.

Your privacy is important to us. We are committed to protecting your personal information and being transparent about our data practices.