Privacy Policy

1. What we collect

• Account data: email address, hashed password, chosen settings.
• Usage data: prompts you generate with, generation results you keep, credits history, pages you visit.
• Technical data: IP address (for rate limiting and security), browser/user-agent.
• Content you voluntarily publish: showcase entries, community posts, comments.

Content safety checks

Before generation or editing, we send the text prompt to Waffo's content safety service to check for restricted content. This check also applies to free generations. Waffo describes the check as stateless and does not retain the original prompt after returning its verdict. We keep the verdict, check reference and related job identifier in an account-linked audit record for up to 400 days. These records do not include the prompt text. A rejected or unavailable check prevents generation; failed work is refunded. Prompt enhancement checks both your input and the improved text before showing it to you. That feature does not charge credits.

2. Why we collect it

• To provide the service: run generations, track credits, deliver exports.
• To secure the service: prevent abuse, fraud and automated attacks.
• To improve it: understand which features are used.
• Transactional email only (verification, password reset, billing). No marketing emails unless you opt in.

3. AI providers

Prompts and reference images are sent to the AI providers that power each generation mode (image, 3D, audio and code models) for the sole purpose of producing your asset. Provider-side data handling follows each provider's policy. Images and edits use Alibaba Cloud Model Studio's Qwen-Image 2.0; Luau generation uses Qwen3-Coder-Plus and prompt enhancement uses Qwen-Plus. See the model disclosure for the currently available features.

4. What we do NOT do

• We do not sell your personal data.
• We do not use your private generations to train models.
• We do not publish your assets without your explicit action.

5. Cookies

We use a necessary session cookie to keep you signed in and a first-party analytics identifier to understand our signup funnel. When a public page includes campaign or referral parameters, we also keep a short-lived first-touch context in browser storage so that a later signup can be attributed to the original link. It stores only bounded `source`, `ref` and UTM values, expires after 30 days, and is not used for cross-site advertising. The analytics identifier is not readable by page scripts and is not set when your browser sends Global Privacy Control or Do Not Track; campaign attribution remains a functional referral and measurement aid.

6. Retention & deletion

You can request account deletion from account settings at any time. Any active subscription is canceled first, access is disabled immediately, and account data is permanently deleted after a 30-day recovery window. First-party analytics events are retained for up to 400 days and processed payment webhook payloads for up to 180 days. Retained backups follow our infrastructure providers' deletion schedules. Billing records required for refunds, fraud prevention, tax, and accounting may be retained after account deletion but are disconnected from the deleted account where our systems allow. Contact us from the account email if you need help with a deletion request.

7. Children

GUIFoundry is not directed to children under 13, and users must be at least 13 to create an account. If you believe a child under 13 provided personal data, contact us so we can remove it.

8. Contact

Privacy questions: hello@guifoundry.com