Privacy Policy

Introduction

Makeable ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image transformation service.

By using Makeable, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you sign up through Google OAuth, we collect:

• Your name
• Your email address
• Your Google profile picture (optional)
• Google account ID

Usage Information

We automatically collect certain information about your use of our service:

• Generation history (which prompts you used, timestamps)
• Credit balance and usage
• Session data (IP address, browser type, device information)
• API usage metrics (tokens processed, estimated costs)

Payment Information

Payment information is processed by Stripe. We do not store your full credit card details. We only store:

• Stripe customer ID
• Subscription status
• Billing cycle dates

Images and Content

Important: We do NOT permanently store your uploaded images or generated outputs. All images are:

• Processed in memory only
• Sent to Google Vertex AI for transformation
• Immediately discarded after generation
• Never saved to our servers or databases

Downloaded images are saved directly to your device and are not retained by us.

How We Use Your Information

We use the collected information for:

• Service Delivery: To provide image generation functionality and manage your account
• Authentication: To verify your identity and maintain secure sessions
• Billing: To process payments and manage subscriptions
• Usage Tracking: To monitor credit usage and display generation history
• Service Improvement: To understand usage patterns and improve our service
• Customer Support: To respond to your inquiries and provide assistance
• Legal Compliance: To comply with applicable laws and regulations

Third-Party Services

We integrate with the following third-party services that have access to your data:

Google OAuth & Vertex AI

We use Google for authentication and AI processing. Your images are sent to Google Vertex AI for transformation. Google's privacy practices are governed by their Privacy Policy.

Stripe

We use Stripe for payment processing. Stripe handles all payment information and is PCI-DSS compliant. Review Stripe's Privacy Policy.

Data Retention

• Account Data: Retained while your account is active and for up to 30 days after deletion
• Usage History: Retained for 12 months for billing and support purposes
• Images: Never stored - processed in memory only and immediately discarded
• Payment Records: Retained for 7 years as required by financial regulations

Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encrypted database connections
• Secure authentication with OAuth 2.0
• Regular security audits
• Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights:

Access and Portability

You can access your account information, credit balance, and generation history through your dashboard at any time.

Correction

You can update your account information through your Google account settings.

Deletion

You can request account deletion by contacting us. Upon deletion:

• Your account will be permanently closed
• Personal information will be deleted within 30 days
• Subscription will be canceled
• Remaining credits will be forfeited
• Payment records will be retained as legally required

Opt-Out

You can opt out of the service at any time by canceling your subscription and deleting your account.

Cookies and Tracking

We use essential cookies and session storage for:

• Authentication and session management
• Remembering your preferences
• Security features

We do not use third-party advertising cookies or tracking pixels.

Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data is based on consent, contract performance, and legitimate interests.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date
• Posting the new policy on this page
• Sending email notifications for significant changes

Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us through our website support channels.

For data protection inquiries specific to GDPR, you may also contact your local data protection authority.