Privacy Policy

We collect the following categories of information:

• Account data — your email address, name or handle, and authentication details when you sign up (including via Google sign-in, if you use it).
• Content you provide — the product photos, brand details (such as colors and logos), and text prompts you upload to generate posts, and the resulting generated assets.
• Billing data — your plan, credit balance, and transaction history. Payment card details are collected and processed directly by Stripe; we never receive or store your full card number.
• Usage & device data — log data, IP address, browser/device type, and how you interact with the Service, collected to operate, secure, and improve it.
• Cookies — strictly-necessary cookies for sign-in/session management, and limited analytics. See section 6.

We use your information to: provide and operate the Service; process your generations; create and manage your account; process payments, subscriptions, and credits; provide support; send service and transactional communications; detect, prevent, and address fraud, abuse, and security issues; comply with legal obligations; and improve our products. We process this data on the legal bases of performing our contract with you, our legitimate interests in running and securing the Service, your consent (where applicable), and compliance with law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Payments are handled by Stripe, Inc., our PCI-DSS-compliant payment processor. When you subscribe or buy credits, your card details are entered into Stripe’s secure environment and are not transmitted to or stored on our servers. We retain only a Stripe customer/subscription identifier and non-sensitive transaction metadata (amount, plan, date, status) needed to manage your account and billing. Stripe’s handling of your data is governed by the Stripe Privacy Policy.

The images and prompts you submit are processed to produce your results and are stored in your private library so you can access and download them. Your generations are private by default. We retain your content for as long as your account is active or as needed to provide the Service and support you, and we delete or anonymize it within a reasonable period after you delete it or close your account, unless we must retain it to comply with law, resolve disputes, or enforce our agreements.

We share data only with trusted providers that process it on our behalf under contractual data-protection obligations:

• Stripe — payment processing and subscription billing.
• Authentication & database providers — to manage your account and store your data.
• Cloud storage providers — to store your uploaded and generated media.
• AI model providers — to generate your images and videos from your inputs.
• Hosting & infrastructure providers — to run and deliver the Service.

We may also disclose information where required by law, to protect our rights and the safety of users, or in connection with a merger, acquisition, or sale of assets (with notice where required).

We use cookies and similar technologies that are necessary to keep you signed in and to operate core functionality, and a limited amount of analytics to understand and improve usage. You can control non-essential cookies through your browser settings; disabling necessary cookies may affect sign-in and core features.

We use industry-standard safeguards including encryption in transit, access controls, scoped service credentials, and private-by-default storage of your media. No method of transmission or storage is 100% secure, but we work to protect your information and to promptly address any incident in accordance with applicable law.

We and our providers may process your information in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the EEA/UK (GDPR) or California (CCPA/CPRA), you have these and related rights, including the right not to be discriminated against for exercising them. You can access and update much of your data in-product, and you may close your account at any time. To make a request, email us at privacy@heyklick.com; we will respond within the timeframes required by law.

The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. If we make material changes, we will provide notice (e.g. by email or in-product) and update the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance.

Questions or requests about your privacy? Email privacy@heyklick.com or our support team at support@heyklick.com.