Privacy Policy

Last updated: April 2026

1. Introduction

ALL STUDIO ("we", "us", "our"), operated at allstudios.xyz, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI image and video generation platform. This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We collect the following categories of data:

• Account information: Your name and email address, collected through our authentication provider (Clerk) when you create an account
• Usage data: Information about how you interact with the Service, including pages visited, features used, session duration, and generation request metadata
• Generated content: Images, videos, and other outputs you create using the Service, stored to provide you with access to your work
• Prompts and project data: Text prompts, node configurations, and project files you create within the workspace
• Payment information: Billing data processed through Stripe. We do not store your full credit card number on our servers
• Technical data: IP address, browser type, device information, and error logs collected automatically

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing, maintaining, and improving the Service
• Processing your generation requests through AI models
• Managing your account and subscription
• Processing payments
• Sending service-related communications
• Monitoring for abuse and enforcing our Terms of Service
• Diagnosing technical issues and improving performance

4. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service you have signed up for
• Legitimate interest: Analytics, security monitoring, and service improvement
• Consent: Where explicitly provided, such as for optional marketing communications
• Legal obligation: Where required by applicable law

5. Third-Party Services

We use the following third-party services to operate ALL STUDIO. Each service may process your data in accordance with its own privacy policy:

• Clerk -- Authentication and user management. Processes your email address, name, and login credentials.
• Stripe -- Payment processing. Handles subscription billing and payment method storage.
• Google Gemini API -- AI model provider. Processes your text prompts and input images to generate outputs. Refer to Google's privacy policy for details on how they handle API data.
• Cloudflare R2 -- Object storage. Stores your generated images and videos.
• Vercel -- Application hosting and deployment. Processes requests and serves the application.
• Sentry -- Error tracking and performance monitoring. Collects error reports and diagnostic data to help us identify and fix issues.

6. Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication and core functionality. These cannot be disabled.
• Analytics cookies: Used to understand how users interact with the Service and to improve performance.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Service.

7. Data Storage and Retention

Your generated content is stored on Cloudflare R2 infrastructure. Account and project data are stored in our databases. We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or legal compliance).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request correction of inaccurate personal data
• Right to erasure: You may request deletion of your personal data, subject to legal obligations
• Right to restriction: You may request that we restrict processing of your personal data
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format
• Right to object: You may object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at support@allstudios.xyz. We will respond to your request within 30 days.

10. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your personal data.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at support@allstudios.xyz.