Privacy Policy

1. Data we collect

• Account data: email address, display name, password hash or OAuth provider identifier, and account creation date.
• Billing data: customer, invoice, plan, payment, and billing metadata. Our payment processor handles full card details; we do not receive full card numbers.
• Content: prompts, reference media, uploads, and generations.
• Usage and security data: IP addresses, browser details, session timestamps, acceptance records, and audit logs.
• Cookies and similar technologies: authentication, consent, and preference information.

2. How we use data

We use data to provide the Service, process generation requests, deliver media, manage billing, prevent fraud, secure accounts, enforce our Terms of Service, comply with law, and communicate about accounts. We also use aggregated, non-identifiable analysis to improve the Service.

We do not sell your personal data or use your prompts or Output to train our own models. Read our Cookies Policy for information about cookies.

3. Examples and promotional material

Subject to section 4 of the Terms, Ronana may use prompts and Output created on Free, Starter, Extra, or Producer to demonstrate or promote Ronana. This includes public examples, tutorials, our website, social channels, and advertisements. Director content is excluded unless you separately agree. The plan at creation controls; an upgrade does not revoke an existing license, and a downgrade does not expose earlier excluded content.

This applies only to eligible material created after you accept the revised Terms. We may share promotional copies with contractors and publishing platforms for that purpose. A reference upload itself is excluded without separate agreement, although elements may appear in Output. Account emails, billing details, credentials, and unrelated personal information are not authorized for publication.

A copyright license does not replace a lawful basis for processing personal data or consent where required. Mandatory privacy rights continue to apply. Contact support@ronana.ai to object to promotional processing or request removal. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing.

4. Providers and other disclosures

We share the data needed for each task with payment processors, hosting and storage providers, content delivery and security services, transactional email providers, and error monitoring services. Generation requests send the selected model provider your prompt, attached references, and request settings. Provider processing is governed by applicable agreements and privacy commitments. Ask support@ronana.ai for our current provider list.

Promotional disclosure is described in section 3. We may also disclose information where required by law, to respond to lawful process, make mandatory safety reports, protect rights and safety, or establish, exercise, or defend legal claims. We limit such disclosures as applicable law requires.

5. Retention and deletion

We retain account content while needed to provide the Service, subject to deletion requests, account closure, applicable storage limits, and disclosed retention periods. Trash items are scheduled for permanent deletion after 24 hours. Audit logs are retained for up to 365 days unless security, fraud prevention, legal compliance, or disputes require longer. Billing records are retained as tax law requires.

After account closure, we delete account content and retain a limited transaction record: processor identifiers, payment amounts and dates, the date and method of Terms acceptance, access IP addresses and dates, and aggregate usage counts. This transaction record contains no prompts, reference media, or Output. It supports tax and accounting obligations and legal claims, including payment disputes, and is retained for up to 400 days unless law or a pending claim requires longer.

Separately, copies selected for lawful promotion may remain for the licensed promotional purpose after content deletion or account closure, subject to your applicable privacy rights. We may preserve data when legally required, including for safety reports or legal holds. A license does not remove statutory erasure rights. Copies independently shared by others may be outside our control.

6. Legal bases and your rights

Where a legal basis is required, we rely on performance of our contract for service delivery, legal obligations for required records and reports, legitimate interests for security and appropriate business operations, or consent where required. Promotional processing is subject to applicable privacy law and section 3.

Depending on your jurisdiction, you may have rights to access, export, correct, delete, restrict processing, object, or withdraw consent. You may complain to your local data protection authority. Contact support@ronana.ai to exercise rights. We may verify your identity and retain limited information where a legal exception applies, including necessary legal claims records.

7. International transfers

We are based in the United States. Providers may process data in the United States and other countries. Where required for transfers of EEA or UK personal data, we use applicable Standard Contractual Clauses or other legally recognized safeguards.

8. Security

We use technical and organizational safeguards, including encryption in transit, access controls, rate limits, and security logging. No system is perfectly secure. Protect your credentials and report suspected account misuse promptly.

9. Children

The Service is not directed to children under 13 or a higher applicable minimum age. We do not knowingly collect personal data from children below that age. Contact support@ronana.ai if you believe a child below the minimum age has provided personal data. The Terms also require parental or guardian agreement for users below the age of legal majority.

10. Changes and contact

We provide notice of material changes by email or through the Service and obtain consent where required. Questions and rights requests: support@ronana.ai.