Privacy Policy

Last updated: January 1, 2025

1. Information We Collect

We collect information you provide directly to us, including: Account information (name, email address, login credentials); Photos and images you upload for AI twin training; Prompts, captions, and content you generate; Payment information (processed securely by Stripe — we do not store card numbers); API keys you provide for third-party services (stored encrypted); Usage data including generation history, settings, and preferences.

2. How We Use Your Information

We use the information we collect to: Provide, maintain, and improve the Service; Process transactions and send related information; Train your personal AI twin models (photos are used exclusively for your account); Send technical notices, updates, and support messages; Respond to your comments and questions; Monitor and analyze usage patterns to improve the platform. We do not sell your personal data to third parties. We do not use your uploaded photos or generated content to train shared or public AI models.

3. Data Storage and Security

Your generated images and AI twin models are stored in private, encrypted cloud storage (Amazon S3). Access is restricted to your account only. We use industry-standard encryption for data in transit (TLS 1.3) and at rest (AES-256). API keys are stored using one-way encryption and are never exposed in plain text after initial entry. We retain your data for as long as your account is active. You may request deletion of your data at any time.

4. Third-Party Services

We share data with third-party service providers only as necessary to operate the Service: Hugging Face — receives your prompts and generation parameters to run Z-Image-Turbo inference. Your HF token is used on your behalf. ElevenLabs — receives audio samples and text for voice cloning when you use Voice Studio. Stripe — processes payment information for subscriptions. Stripe's privacy policy governs their handling of payment data. These providers are contractually bound to protect your data and may not use it for their own purposes.

5. Cookies and Tracking

We use session cookies for authentication purposes only. We do not use third-party tracking cookies, advertising pixels, or behavioral analytics tools. We use privacy-respecting analytics to understand aggregate platform usage (page views, feature usage) without tracking individual users across the web.

6. Your Rights

Depending on your location, you may have the right to: Access the personal data we hold about you; Request correction of inaccurate data; Request deletion of your data; Object to or restrict processing of your data; Data portability (receive your data in a machine-readable format). To exercise these rights, contact us at [email protected]. We will respond within 30 days.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such information promptly.

8. International Data Transfers

ZCreator operates globally. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or to exercise your rights, contact our Data Protection team at [email protected] or through the Contact page on our website.