/privacy
Privacy Policy
Last updated: September 14, 2026
1. Data we collect
When you create an account we store your name, email address, and a bcrypt hash of your password (never the password itself). When you generate images we store your prompts, generation parameters, and the resulting images. Session cookies keep you logged in.
2. Payment information
Card details are transmitted directly to our self-hosted payment gateway over an encrypted, server-to-server connection. The gateway stores card details to process your subscription and automatic renewals. This website's servers do not receive or store your full card number.
3. How we use your data
Your data is used solely to operate the service: authenticating you, generating images, managing subscriptions, and sending transactional email such as verification codes and payment receipts. We do not sell personal data.
4. Cookies
We use a session cookie (strictly necessary, keeps you signed in) and, if you accept, a consent cookie remembering your choice. No third-party advertising or tracking cookies are used.
5. Data retention & deletion
Your account and its data remain until you delete your account. You can delete your account at any time from the Account page — it permanently removes your profile, generations, images and sessions. Payment records are retained as required by law.
6. Your rights (EEA/UK)
Under GDPR you may request access, correction, or deletion of your personal data, and you may withdraw consent at any time. Contact us at the address on the Terms page.
7. Contact
For privacy requests, email the PromptCanvas team via the contact information published on the Terms page.