Privacy Policy

We collect account email, authentication identifiers, billing status, IP-derived abuse signals, uploads, prompts, generation metadata, and support requests.

We do not store passwords. Authentication is handled through Supabase OAuth and magic-link flows.

We use infrastructure and processing vendors including Supabase, Cloudflare R2, generation providers, payment processors, analytics, and monitoring tools.

Uploaded and generated media is retained only as needed for account history, downloads, legal requests, security, and abuse prevention.

You can request account deletion from the footer or account settings. Manual deletion requests are reviewed within 30 days.

For privacy or legal requests, contact dmca@heyalam.com or use the relevant in-product form.