Privacy Policy

1. Introduction

Welcome to Flux2.Cloud, an AI-powered platform for generating and editing images. This Privacy Policy describes how we collect, use, and protect your personal information when you use our services. It covers account holders and guest users. We process information under applicable law and seek consent where required; visiting the site is not blanket consent to every processing activity. Contact support@flux2.cloud for privacy questions.

2. Information Collection and Use

We may collect the following types of information:

• Account Information: Your name and email address, used to manage your account and provide customer support.
• Usage Details: Data about your interactions with our services, used to analyze user engagement and improve our services.
• Device Information: Technical specifications, used to optimize our services for different devices.
• Cookies: Used to enhance the functionality of our services and personalize your experience.
• Payment and billing information: We keep order, product, amount, currency, payment status, and related user and payment-provider customer identifiers. For Subotiz hosted checkout, we send your account email, user or payer ID, order ID, product or price ID, quantity, currency, language, and necessary order metadata to create checkout and reconcile delivery; the price ID identifies the product amount. For Waffo Pancake hosted checkout, we send your account email, product ID, currency, order ID, return address, and necessary order metadata such as internal user and order identifiers, plan details, and credit settings to reconcile delivery. These internal identifiers link records and do not include passwords or card details. The payment provider collects card and billing details directly on its checkout page. We do not receive or store full card numbers or CVC security codes through this hosted checkout. The provider processes the payment details it collects under its applicable privacy policy.
• Input and Generated Content: Images, text, and other inputs you upload, as well as content generated using our services.

3. Data Storage and Security

We implement encryption and access controls to protect against unauthorized access, alteration, disclosure, or destruction. However, no method of digital storage is completely secure.

• Signed-out generations: Anonymous browser history and signed image access are normally available for 24 hours, subject to the expiration shown in the interface. Guest images are not saved to an account-based long-term gallery. We may temporarily store image objects, tasks, and download records to deliver and retry downloads; they enter cleanup after expiration. Upstream providers retain their own copies under their policies, which may have different deletion timing.
• Signed-in free users: Images are generally retained for 30 days and are limited to the most recent 200 images, whichever limit is reached first.
• Purchased-credit generations: Images generated with purchased credits are generally retained for 365 days.
• Subscribers: Images generated while a subscription is active are generally retained through a 90-day grace period after the subscription ends.

Expired images are hidden from account history and enter our deletion process. Removal from caches, backups, or third-party provider systems may take a reasonable processing period.

4. Information Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• Prompts and input images needed to fulfill requests are processed by generation providers; hosting, storage, and delivery providers process images, tasks, and logs; account, security, and abuse-prevention providers process information needed for authentication and safety.
• Payment providers such as Waffo Pancake and Subotiz receive order and account information needed for checkout, payment reconciliation, refunds, subscriptions, and transaction security.
• To investigate copyright, privacy, or abuse complaints, necessary complaint materials and records may be shared with affected users, rights holders, professional advisers, or authorities, taking privacy and legal requirements into account.
• Information may be disclosed as necessary and appropriate to meet legal duties, respond to lawful requests, protect people and platform security, or establish legal rights.

5. Advertising, Cookies, and Google AdSense

We may use Google AdSense to display advertising on some public pages. Third-party advertising vendors, including Google, may place or read cookies on your browser and may use web beacons, IP addresses, and other identifiers to serve ads, measure advertising, prevent fraud and abuse, and maintain their services.

• Ad personalization: Third-party vendors, including Google, may use cookies to serve ads based on your previous visits to this website or other websites. Google's advertising cookies allow Google and its partners to serve ads based on visits to this site and other sites on the Internet.
• Non-personalized ads: Depending on your consent choices, advertising settings, and applicable law, we may request personalized or non-personalized ads. Non-personalized ads may still use cookies or mobile advertising identifiers for functions such as frequency capping, aggregated ad reporting, and fraud and abuse prevention.
• How Google uses data: When you visit a site that uses Google services, your browser sends information such as the current page URL and your IP address to Google, and Google may set or read cookies. Learn more in How Google uses information from sites or apps that use its services.
• Your choices: You can manage ad personalization in Google Ads Settings and limit or delete cookies through your browser settings. Limiting cookies may affect some advertising or website functions but does not prevent every form of data processing.
• Consent management: Where required by applicable law, we use consent messages or a Google-certified consent management platform to ask for choices about relevant cookies and personalized advertising purposes. You can revisit or change choices through an available privacy message.

6. International processing and your rights

We and our providers may process information outside your country or region. We will meet applicable legal requirements for international processing, including required notices, consent, and other safeguards. Providers apply their own policies to independent processing activities. Do not upload sensitive information you are not authorized to provide to these services.

Depending on applicable law, you may request access, a copy, correction, deletion, restriction, objection, withdrawal of relevant consent, or other personal information rights. Contact support@flux2.cloud. We may proportionately verify identity, respond within applicable legal deadlines, and explain any lawful limits on fulfillment. You may also complain to a competent authority. Transaction retention, dispute resolution, or other legal duties may limit deletion. See our Content Removal Policy for specific content requests.

7. Age restriction

The Service is only for people aged 18 or older, including guest trials. People under 18 may not use it. Contact support if a minor has used the Service or submitted personal information. We will investigate, restrict the relevant use, and delete or restrict information as required by law, except for records we must legally retain.

8. Policy Updates

We will update the effective date and give notice of material changes, obtaining fresh consent where required by law. Image retention periods do not mean all security, order, or legal records are deleted on the same date; those records are kept for as long as needed for their relevant purpose or legal requirements.