Privacy Policy
Publication date: 2026-04-02 Version: 3.0
1. Overview
1.1. This Privacy Policy explains how Charmonye collects, uses, stores, and protects personal data when you use the Service.
1.2. By using the Service, you acknowledge this Privacy Policy.
1.3. If you do not agree with this Policy, do not use the Service.
2. Data We Collect
2.1 Account and product data
| Data type | Purpose | Retention |
|---|---|---|
| Email address | Account identification and service notifications | Until account deletion |
| Display name | Product personalization and profile display | Until account deletion |
| Country or region | Content and settings personalization | Until account deletion |
| Generation history | Product functionality and user workspace | 365 days |
| Purchase history | Plan accounting, support, and refunds | Up to 5 years |
| Text prompts | Image generation operations | 30 days |
| Uploaded images | Image generation operations | 90 days |
2.2 Payment data
2.2.1. Payment card credentials are not stored on Charmonye servers.
2.2.2. Payment processing is handled by external payment providers used during checkout.
2.3 Technical and security data
2.3.1. We may process operational logs and security metadata required to protect accounts, detect abuse, and maintain platform reliability.
3. Why We Process Data
We process personal data to:
3.1. Provide core Service features, including AI image generation and account functionality.
3.2. Process purchases, credits, and refunds.
3.3. Deliver user support and resolve incidents.
3.4. Improve product quality, reliability, and fraud prevention.
3.5. Produce aggregated analytics that do not directly identify individuals.
4. Data Sharing
4.1 AI infrastructure providers
4.1.1. To process generation requests, we may share uploaded images and text prompts with trusted AI providers.
4.1.2. We share only the data needed for the requested operation.
4.2 Payment providers
4.2.1. Payment transactions are processed by third-party payment systems according to their own policies and compliance obligations.
4.3 Service vendors
4.3.1. We may use vetted vendors for hosting, monitoring, email delivery, and support tooling under contractual confidentiality and security obligations.
4.4 We do not sell personal data
4.4.1. We do not sell personal data to advertisers or data brokers.
5. International Data Transfers
5.1. Some infrastructure providers may process data in multiple regions.
5.2. When transfers occur, we apply reasonable safeguards designed to protect personal data.
6. Data Security
6.1. We use technical and organizational measures intended to protect personal data, including encrypted transport, access controls, and security monitoring.
6.2. No system is perfectly secure. You should also protect your account credentials and report suspected compromise immediately.
7. Your Rights and Choices
Depending on your location and applicable law, you may request to:
7.1. Access your personal data.
7.2. Correct inaccurate personal data.
7.3. Delete your account and associated personal data, subject to legal retention obligations.
7.4. Object to or restrict certain processing activities.
7.5. Request data portability where applicable.
Submit requests through the support or privacy contact channel available in the Service interface.
8. Retention
8.1. We keep personal data only as long as needed for the purposes described in this Policy, legal obligations, dispute resolution, and enforcement.
8.2. After retention periods expire, data is deleted or anonymized when feasible.
9. AI-Specific Notice
9.1. The Service uses AI models to generate content from images and text prompts.
9.2. AI outputs are probabilistic and may be inaccurate or incomplete.
9.3. Uploaded inputs and model outputs may be processed temporarily to provide requested generation features.
10. Policy Updates
10.1. We may update this Privacy Policy.
10.2. Updated versions become effective 7 days after publication in the Service legal section.
10.3. Continued Service use after the effective date means you accept the updated Policy.
11. Contact
For privacy requests or questions:
- Use the privacy or support contact channels published in the Service interface.