Privacy Policy

1. Information We Collect

When you register, interact with our studio, or purchase credits, we collect the following categories of information:

• Account Credentials: Full name, verified email address, hashed passwords, and authentication timestamps.
• Payment & Transaction Records: Payments are processed directly through Creem. OmniCraft never stores or touches full credit card numbers, CVVs, or bank credentials. We retain only tokenized customer identifiers, order receipts, and credit ledger logs.
• Generation Prompts & Assets: The text descriptions, negative prompts, camera motion settings, and generated image/video URLs created within your studio account.
• Technical Device Data: IP addresses, browser agent headers, and session tokens utilized for abuse prevention and rate-limiting enforcement.

2. How We Use Your Information

We process collected data exclusively for the following legitimate purposes:

• Provisioning and maintaining your studio workspace and credit ledger balance;
• Routing prompt requests through automated safety filters and GPU rendering pipelines;
• Delivering transactional emails (receipts, password resets, verification);
• Enforcing rate limits and stopping malicious, abusive, or automated attacks;
• Complying with statutory accounting and tax regulations via Creem.

3. Model Training & Data Privacy Commitment

4. Third-Party Service Providers

To deliver ultra-low latency rendering and reliable billing, we partner with trusted global infrastructure providers:

• Creem: Merchant of record, hosted checkout, payment orchestration, and tax compliance.
• Enterprise Cloud Hosting: Dedicated edge servers, encrypted databases, and high-performance GPU clusters.
• Transactional Email: Automated delivery of verification links and invoice notifications.

5. Data Retention & Your Rights (GDPR & CCPA)

Depending on your jurisdiction (including the European Economic Area, UK, and California), you possess specific statutory rights regarding your personal data:

• Right of Access: Request a complete export of your account and ledger history.
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account, prompts, and stored image/video assets.
• Right to Rectification: Update inaccurate account credentials in your settings.

To exercise any of these rights, simply email our Data Protection Officer at [email protected]. We fulfill verified requests within 30 calendar days without administrative fees.