Privacy Policy
How we collect, use, process, and safeguard your personal information and creative data.
Last updated: 2026-11-09
1. Introduction
Welcome to our AI platform. We respect your personal privacy and are deeply committed to protecting your personal data and creative assets. This Privacy Policy outlines how we collect, store, process, and protect your information when you access our website, use our generative AI tools (including text-to-image, text-to-video, and music generation), and purchase credit packages or subscriptions.
By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
We collect information directly provided by you, automatically recorded through your usage, and received from authorized third parties:
- Account Information — When you sign up or log in, we collect your name, email address, avatar, and authentication identifiers (such as OAuth providers via Google, GitHub, or email verification).
- Generation Prompts & Uploaded Assets — We collect the prompt texts, reference images, source media, and style configurations you submit for AI generation, as well as the resulting generated media files.
- Billing and Transaction Data — When purchasing credits or subscription plans, our third-party payment processors (e.g., Stripe, Creem) collect necessary billing information. We do not store full payment card numbers on our servers.
- Device and Usage Telemetry — We automatically collect technical information including your IP address, browser type, operating system version, access timestamps, and interactions with our tools to optimize service performance and security.
- Cookies and Local Storage — We use essential cookies and browser local storage to maintain your authentication state, interface preferences, and active drafts.
3. How We Use Your Information
We process your data for the following legitimate purposes:
- Service Delivery & Media Generation — To process your prompts and media inputs through our AI pipeline and deliver generated images, videos, and music.
- Account & Credit Management — To track credit balances, record transaction history, and manage your account lifecycle.
- Safety, Compliance & Content Moderation — To detect and prevent abusive, fraudulent, or harmful activities, enforce our acceptable use policies, operate automated and manual content moderation workflows, investigate user-submitted violation reports, and preserve evidence to comply with mandatory reporting obligations (including CSAM reporting to NCMEC and relevant law enforcement).
- Customer Support & Communications — To respond to your technical inquiries, notify you of system updates, and deliver essential account notifications.
- Product and Service Optimization — To analyze aggregated usage trends and improve service responsiveness, media delivery and interface usability.
4. AI Processing, Providers and Visibility
- To deliver generation, storage and safety processing, we send relevant prompts, settings and reference media to the processing services used by the selected model. These may include model gateways, generation providers and moderation services. Browser generation is cloud processing, not local-only inference.
- We do not sell your personal data or user-submitted creative assets to third parties.
- Account task records have access controls. Separately, public generation settings can make outputs and displayed prompts/model information eligible for public creation surfaces. Check the visibility setting before submission. Tasks without an explicit private flag may be treated as public by those surfaces; API integrations should explicitly set
options.visibilitytoprivateto exclude them. - A private creation setting does not guarantee private media delivery. Uploaded and generated media may be delivered through public or signed URLs according to the storage or provider configuration. People holding such a link may be able to access the media without your account login, subject to any URL restrictions or expiry.
- We do not make a single verified zero-retention or no-training commitment for every upstream service. Processor identity, location, retention and training conditions depend on the route. If you need contractual confidentiality or specific processing conditions, contact support to confirm them before uploading sensitive material.
5. Data Storage, Removal and Retention
- We retain account and personal data as needed to provide services and meet applicable obligations. Different record types and processors may have different retention periods; this policy does not specify one verified deadline covering every copy.
- Generation inputs and outputs may remain in cloud or provider storage. Download your own copies for preservation; the service is not a permanent archive.
- Removing a creation currently marks its task record as deleted. It does not itself guarantee physical deletion of its media objects, upstream copies, caches, backups or copies already downloaded by others.
- Contact support for an account or media-deletion request. We will assess the applicable request, processing scope and retention obligations. We do not promise instant erasure across all processors or a universal media-link expiry period.
6. Data Security
We use measures including encrypted web transport and account access checks. Account authorization and media-link access are separate controls, as described above. No transmission or storage method is completely secure; these measures do not establish authenticated private storage for every media URL.
7. Your Privacy Rights
Depending on your jurisdiction and applicable privacy law, you may request:
- Access and portability — A copy of personal information we hold about you.
- Correction — Updates to inaccurate information.
- Deletion — Removal of your account or associated data, subject to applicable retention obligations.
- Withdrawal of consent — Withdrawal where processing relies on consent, subject to the applicable conditions.
Use available account controls for supported changes, or contact support@tikdek.com for requests and confirmation of scope. Do not assume that an account-settings control deletes all media or provider copies. Include your account identifier and relevant task IDs, but never your password or API key.
8. Updates to This Privacy Policy
We may periodically revise this Privacy Policy to reflect changes in our services, technological advancements, or legal requirements. When updates occur, we will revise the "Last Updated" date at the top of this document. Continued use of our platform after changes take effect constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact support@tikdek.com.
For practical examples, read the privacy and commercial-use guide.