Privacy Policy

Effective October 15, 2026 · Operated by AlyxStack LLC

CraftImageKit provides AI portrait generation. Stripe securely processes real payments; we do not receive or store full card details. Payment adds credits, and generation requires a separate confirmation.

Information we use

When you sign in with Google, we receive your account identifier, email address and basic profile information, such as your name and profile picture. We use this information to authenticate you and associate your drafts, purchases, credits and support requests with your account. We do not request access to your Gmail messages, Google Drive files, contacts or calendar. Email sign-in uses your email address and a one-time code.

We also process the photos you choose to upload, appearance and style selections, saved drafts, image results, order and credit records, and information you submit for support. Operational records help us secure the service, resolve failures and reconcile payments. Do not send passwords or payment-card details in support requests.

How information is used and shared

We use your information to provide account access, save and restore your work, fulfill requests you explicitly submit, manage credits, provide downloads, handle support and deletion requests, and prevent misuse. A payment does not automatically start image generation.

Supabase provides authentication, database and private image storage. Google provides Google sign-in and our Workspace email delivery. Stripe processes checkout and payment records; payment-card details are entered on Stripe-hosted checkout, not stored by CraftImageKit. The website runs on our VPS hosted by OVHcloud. These providers process information needed for their respective functions under their own applicable terms.

When you explicitly submit image generation, the photos and instructions required for a submitted request will be processed by the configured image-generation provider. Our configured provider is Tuzi (api.tu-zi.com), which may forward images and instructions to upstream model providers. Provider retention and processing locations depend on their policies and configuration; we do not promise zero retention.

We do not sell your personal information or use your Google account information for advertising or AI model training. Uploaded photos and private results are not published as public galleries by this service. We may disclose information when required by law or when necessary to address fraud, abuse or security incidents.

Storage, retention and deletion

Drafts and their uploaded photos expire 30 days after the last saved change or upload. Stored results expire 30 days after their creation; viewing, downloading or email notices do not extend that period. Expired or deleted material becomes unavailable through the product immediately, while physical object deletion runs through a separate queue and may take additional time if a service fails. Credits do not expire merely because images expire.

Order, credit, refund and minimal security or deletion audit records are retained separately where needed for accounting, dispute handling and service integrity. Deleting a photo does not erase its associated payment history. Service providers may retain backups or records under their own retention practices.

Your choices

You can sign out, remove photos or delete eligible drafts and results using the product controls, and contact us to request access, correction or account deletion. We verify account ownership before acting on requests. You can also revoke CraftImageKit access from your Google Account settings. Revoking Google access does not itself delete information already held in your CraftImageKit account.

Cookies, security and international processing

We use browser storage and authentication cookies to maintain your session and restore your work. Private images require authenticated access; no system can guarantee absolute security. Our service providers may process information outside your country. This service is intended for adults aged 18 or older and is not intended for children.

Contact and updates

For privacy, account or support requests, email me@alyxstack.com. Changes to this policy will be posted here with an updated effective date.