Privacy Policy
Last updated: 8 May 2025
Welcome to Aluo ("we", "our"). This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our websites or use our services (collectively, the "Service").
By default, uploaded images are processed in your browser and are not permanently stored on our servers. AI-generated outputs may be temporarily cached for delivery but are not retained long-term unless you explicitly choose to save them.
1. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account Data | Name, email address, avatar URL, locale | Account creation, login, support |
| Usage Data | Editor actions, generation history, credit consumption | Product analytics, model tuning, fraud prevention |
| Device Info | Browser UA, OS, screen resolution | Optimisation, performance monitoring |
| Cookies / Local Storage | Session token, UI preferences, recent projects | Seamless sign-in, personalised UI, quick resume |
| Billing Data | Order ID, payment token (stored by Stripe) | Subscription management, invoicing |
2. How We Use Your Information
- Provide and maintain the Service (AI generation, online editor, HD export)
- Send important notices (system updates, low-credit reminders)
- Analyse aggregated usage to improve features and stability
- Detect fraud and abuse
- Comply with legal obligations
3. AI Content & Model Usage
- Prompts & images are streamed to the model endpoint only during inference and are not persisted. They are never used for model fine-tuning or retraining.
- Models in production We orchestrate multiple state-of-the-art AI models from leading providers. Our intelligent router automatically selects the optimal model for your specific task to ensure the best results.
- You own the copyright to any final image generated / edited with Aluo, except where a template with its own licence is explicitly indicated.
4. Data Retention & Security
- Database hosted on Supabase (PostgreSQL), traffic encrypted via HTTPS/TLS.
- AI output files remain in the browser session for download and are discarded afterwards, unless you opt to save them.
- User-uploaded images live in the browser's IndexedDB cache and are purged by the client at regular intervals or when you clear site data.
- We enforce the principle of least privilege and run periodic security audits.
- Despite best efforts, no online transmission is 100 % secure—if you discover a vulnerability, email [email protected].
5. Sharing & Disclosure
We never sell or rent personal data. We share it only when:
- You give explicit consent;
- It's required for payment processing (Stripe PCI-DSS);
- Law enforcement or public authorities demand it;
- We undergo a business transfer (we will give prior notice).
6. Your Rights
Depending on your location, you may have specific rights under applicable data protection laws, including GDPR (European Economic Area) and CCPA (California, USA):
- Access – Request a copy of your personal data
- Correction – Update inaccurate or incomplete information
- Deletion – Request deletion of your personal data ("right to be forgotten")
- Portability – Receive your data in a structured, machine-readable format
- Opt-out – Object to certain processing activities, including direct marketing
- Withdraw consent – Where processing is based on consent, you may withdraw it at any time
To exercise these rights, visit Settings → Privacy or email [email protected]. We will respond within 30 days (or as required by applicable law). We do not sell your personal information.
7. Children's Privacy
The Service is intended for users 16 years and older. If we learn a child under 16 has provided personal data, we will delete it and close the account.
8. Changes to This Policy
We may update this Policy. We'll post any changes here and, if they're significant, send a site notification or email 7 days in advance. Continued use of the Service means you accept the revised Policy.
9. Contact Us
Email [email protected]
Address Sheridan, WY, USA
Thank you for trusting Aluo!