Privacy Policy

• Account information: your email address, a hashed password, and — if you sign in with Google, GitHub, X, or LinuxDo — the account identifier and basic profile fields that provider returns. We never receive your password from those providers.
• Creative content: the prompts you write, the images and videos you upload as references, the results the service generates for you, and the generation history that lets you find them again.
• Brands you save: the name, description, colors, fonts, and style notes you enter, and the logo, reference images, and screenshots you upload for them.
• Subscription and billing records: your plan, credit balance, credit ledger entries, orders, and payment or refund status. Card details are handled by our payment partners and never reach our servers.
• Technical and security data: IP address, browser and device information, request logs, rate-limit counters, and anti-abuse signals including Cloudflare Turnstile results.
• Cookies and local storage: essential cookies keep you signed in and remember your language and theme. Microsoft Clarity analytics cookies are set only after you accept them in the cookie banner; you can withdraw that choice at any time via "Cookie settings" in the footer. We do not use advertising cookies.

• Provide the service: generate images and videos, run the editing tools, and keep your history and assets available to you.
• Authenticate you, maintain your session, and let you recover your account.
• Meter and charge credits, process subscriptions and orders through our payment partners, and answer billing questions.
• Keep the service working and safe: debugging, rate limiting, content moderation of prompts, and fraud and abuse prevention.
• Respond to your support requests.

We do not use your prompts, uploads, or generated results to train AI models — not our own, and not anyone else's.

Your uploads and results are stored so that you can reach your own history. You can delete generation records yourself at any time.

Brands you save are private to your account. For content safety, our staff may review a saved brand, including its images, and may delete it if it breaks our Acceptable Use Policy.

To fulfil a request, the prompt and any reference media you provide are sent to the model provider that runs the model you selected. Those providers process that request under their own terms; see the next section.

When you create a brand from screenshots, the screenshots, the logo, the brand name, and any notes you add are sent to the AI model provider that runs the analysis model, so that it can draft the brand for you.

We share only what each provider needs in order to do its job:

• AI model providers — Google, OpenAI, Volcengine Ark, BytePlus, and xAI — receive the prompt and any reference media for the model you choose, in order to generate your result.
• When you create a brand from screenshots, the provider of the model we use for that analysis receives the screenshots, logo, brand name, and notes, in order to draft the brand.
• Creem (Creem Inc.) and Waffo (Waffo.com Limited, or the Waffo affiliate named for your region in its Buyer Terms) act as merchant of record for purchases made through them, and Stripe processes payments where offered. Each receives what it needs to bill you: your email address, the product purchased, and payment details you enter on its checkout page.
• Creem also screens the text prompts you submit for image and video generation, the text of brands you save, and the notes you add when creating a brand from screenshots, before they are used, so that the service is not used to generate prohibited content. Creem receives that text and an opaque account identifier.
• S3-compatible object storage (Cloudflare R2) holds your uploads and generated files.
• Cloudflare provides bot protection (Turnstile) and content delivery.
• Microsoft Clarity records how visitors use the site — page views, clicks, scrolling, and anonymised session replays — so we can find confusing or broken parts of the interface. Clarity receives your IP address, device and browser information, and interaction data; form input is masked before it leaves your browser. Without your consent Clarity runs without cookies and cannot link one visit to the next. Microsoft processes this data under its privacy statement.
• Our transactional email provider delivers verification and account email.

• Expired sessions, used verification codes, and derived media files nobody has accessed in a while are purged automatically on a recurring schedule.
• Your account, generation history, and generated files are kept for as long as your account is active. They are not deleted on a timer — you can delete generation records at any time, and you can ask us to delete your whole account by writing to [email protected].
• Every prompt that goes through content screening is kept in full for a limited time — 30 days by default. We can shorten that period, or keep only the prompts that were rejected. After that we keep only a hash of the text and the decision itself. The moderation decision records are kept for 180 days.
• Some records — payment, tax, and abuse-prevention records — may be retained after account deletion where law requires it.

Traffic to and from the service runs over encrypted connections. Passwords are stored hashed, never in plain text. Access to production data is limited to the people who need it to operate the service.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you as required by applicable law.

Depending on where you live, you may have the right to access a copy of your personal data, correct inaccurate account information, delete your account and its data, export your account information, or object to processing we base on our legitimate interests.

Write to [email protected] to exercise any of these. We may ask you to verify your identity before we act, and we will respond within the time applicable law allows.

We operate from the United States and our providers operate across several jurisdictions. Using the service means your data may be processed outside the country you live in, including in the United States.

The service is not directed to children under 13, and we do not knowingly collect their personal information. Accounts and purchases require you to be at least 18, or the age of majority where you live; users between 13 and 18 may use the service only with the involvement of a parent or guardian, who is the only person who may make purchases. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. Material changes will be posted on this page with a new "last updated" date. Continuing to use the service after a change means you accept the revised policy.

Zero Agentic LLC, 30 N Gould St Ste N, Sheridan, Wyoming 82801, United States. Email: [email protected]