Privacy Policy

• Account data — email, optional name, hashed password (bcrypt; we never see or store the plain password).
• Usage records — your generations (prompts, settings, resulting files), token ledger and payment records. These exist so your balance is correct and your history is yours to see.
• Session cookie — a single cookie that keeps you signed in. No advertising trackers, no analytics cookies.

We run the service. That is the whole list: authentication, generating what you asked for, accounting for tokens, sending transactional email (password reset, receipts). We do not sell data, we do not run ads, and we do not use your content or prompts to train models.

• AI providers — your prompts and reference files are sent to the generation provider strictly to produce what you requested.
• Email — transactional messages go through Resend.
• Payments — handled by our payment processor as merchant of record; we never see your card number.

Your data lives as long as your account does. Ask us to delete your account and we remove your personal data and files; token and payment ledgers are kept only as long as accounting law requires, then deleted.

You can request access, correction, export or deletion of your data at any time. One email is enough: support@syntfluence.com. We answer within 30 days.

Passwords are hashed, sessions are server-side, traffic is encrypted in transit, and provider API keys never leave the server. No system is perfect; if a breach affects your data we notify you without undue delay.