Legal

Privacy Policy

How FluxArt handles account data, uploaded media, prompts, generated content, payments, analytics, and privacy requests.

Last Updated: August 5, 2026

Privacy at a Glance

We use your prompts, uploads, and settings to provide the AI creation services you request.

Uploaded files may be stored as media URLs so FluxArt systems and AI model/API providers can retrieve them for processing.

Payments and billing are handled through Creem. FluxArt does not store full card numbers.

We do not sell personal information or use your private inputs to train FluxArt-owned models unless we ask for separate permission.

What FluxArt Processes

Data Type	Examples	Primary Purpose
Account Data	Email address, name, avatar, login method, session data	Create accounts, authenticate access, protect the service, and provide support
Creative Inputs	Prompts, uploaded images, videos, audio, reference assets, generation settings	Generate the media you request and troubleshoot generation issues
Generated Content	Generated videos, previews, thumbnails, task status, history	Show results, support downloads, retries, account history, and abuse prevention
Billing Data	Plan, credits, order status, invoices, Creem payment events	Manage purchases, subscriptions, credits, refunds, taxes, and fraud prevention
Usage and Device Data	Pages visited, feature usage, browser type, logs, IP-derived approximate location, analytics events	Secure, debug, measure, and improve FluxArt

Third-Party Services and AI Processing

Category	Providers / Services	Data Shared	Purpose	Retention and Training Notes
AI model/API processing	AI model/API providers used for the selected workflow	Prompts, uploaded media URLs, generation settings, model/workflow choices, task metadata, generated outputs, error details	Complete generation requests, run safety checks, return results, troubleshoot failures, and prevent abuse	FluxArt does not use private prompts, uploads, or generated outputs to train FluxArt-owned models unless we ask for separate permission. Third-party AI providers process data under their own terms and data practices. Where available, FluxArt prefers provider options that limit retention or training use, but this may depend on the selected model, workflow, and provider.
Media storage	S3-compatible storage, including Cloudflare R2 or similar object storage	Uploaded images, videos, audio, generated outputs, thumbnails, media URLs, related file metadata	Store uploads and generated results, support downloads and account history, and allow AI providers to retrieve files needed for your request	Media may remain while your account history is active unless deleted or deletion is requested where applicable. Backup, cache, fraud-prevention, billing, and provider copies may not be removed immediately.
Payments and billing	Creem	Account email, plan, product identifier, checkout status, invoice references, subscription status, refund status, credit balance changes	Process checkout, subscriptions, invoices, refunds, taxes, payment status, and fraud prevention	FluxArt does not store full payment card numbers. Payment data is processed under Creem's privacy and security practices and may be retained for tax, accounting, fraud-prevention, and dispute-resolution purposes.
Email and customer communication	Brevo	Email address, message content, support request metadata, service notification data	Send service emails, respond to support, privacy, billing, and refund requests, and manage customer communications	Communication records may be retained while needed for support, account administration, legal obligations, dispute resolution, and service protection.
Hosting, infrastructure, and security	Vercel, database providers, storage providers, and related infrastructure vendors	IP-derived logs, request metadata, device/browser data, account and task records, diagnostic events	Host FluxArt, operate APIs, secure accounts, debug errors, monitor reliability, and protect the service	Operational and security records are retained as needed for reliability, security, legal compliance, and abuse prevention.
Analytics and performance	Plausible, Vercel Analytics, Vercel Speed Insights, Google Search Console, Microsoft Clarity	Page views, referrers, device/browser data, approximate location, performance metrics, interaction events, heatmaps or session-replay style insights where applicable	Understand search performance, product usage, page performance, errors, and usability	Non-essential analytics are controlled through Cookie Preferences where applicable. Microsoft Clarity may provide heatmaps or session-replay style insights; we use these tools to improve usability and reliability, not to collect payment card numbers or intentionally capture sensitive account secrets.

1. Introduction

FluxArt provides AI creative tools for generating and managing images, videos, audio-related assets, and other media. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you may have.

This Policy applies to FluxArt websites, account features, generation tools, billing flows, upload features, creation history, and related support communications.

2. Information We Collect

We collect information you provide directly, information created when you use FluxArt, and technical information collected automatically.

This may include account information, prompts, uploaded files, generated outputs, generation parameters, billing records, support messages, device information, log data, cookie data, analytics events, and approximate location inferred from network or device data.

If you upload images, videos, audio, or other assets, those files may include metadata. Please avoid uploading sensitive personal information, regulated data, confidential files, or content involving minors unless you have a lawful basis and the upload is necessary for the creation you request.

3. How We Use Information

We use information to provide FluxArt, process AI generation requests, upload and store media, display creation history, manage credits and subscriptions, send service notices, respond to support requests, protect accounts, prevent abuse, debug errors, and improve reliability.

We may process prompts, uploads, generated outputs, account activity, and related metadata for content moderation and safety review, including NSFW and abuse detection, policy enforcement, fraud prevention, and service protection.

We may use aggregated or de-identified information to understand product usage and improve workflows, interface quality, performance, and safety. We do not try to identify you from aggregated or de-identified data.

We do not use your private prompts, uploaded media, or generated content to train FluxArt-owned AI models unless we ask for separate permission. Third-party AI model/API providers may process requests under their own terms and policies.

4. Uploads, Media URLs, and AI Provider Processing

When you upload images, videos, audio, or other assets, FluxArt stores those files with an S3-compatible storage provider and may create media URLs so our systems and the AI model/API providers needed for your request can retrieve the files.

These media URLs are intended for service processing, generation, downloads, account history, and troubleshooting. They may not require a FluxArt login to access if someone obtains the URL. Do not share media URLs publicly unless you intend the linked content to be accessible.

Depending on the selected workflow, FluxArt may send prompts, uploaded media URLs, source videos, audio, reference assets, model and workflow choices, generation settings, task IDs, status data, error details, and generated outputs to AI model/API providers so they can complete your request and return results.

FluxArt does not use your private prompts, uploads, or generated outputs to train FluxArt-owned models unless we ask for separate permission. Third-party AI model/API providers may process prompts, uploaded media, generation settings, and generated outputs under their own terms and data practices. Where available, FluxArt prefers provider options that limit retention or training use, but availability may depend on the selected model, workflow, and provider.

Please do not upload private, sensitive, confidential, biometric, regulated, or third-party content unless you have the right to do so, understand the processing risks, and accept that the content may be handled by FluxArt systems and third-party service providers involved in the generation workflow.

5. Generated Content and History

Generated content may be kept in your account history so you can review, download, retry, or manage previous creations. Creation records may include the prompt, selected model, settings, status, credits used, source asset URLs, generated media URLs, thumbnails, error messages, and timestamps.

If you delete a creation, FluxArt may hide it from your active account history. Deletion may not immediately remove every copy from backups, logs, fraud-prevention records, billing records, provider systems, or storage caches. We take reasonable steps to remove or isolate content from active systems when deletion is available and appropriate.

6. Payments, Credits, and Subscriptions

FluxArt uses Creem to process checkout, subscriptions, invoices, payment events, billing status, and related refund workflows. Creem may collect and process payment information under its own privacy and security practices.

FluxArt may receive limited billing information such as plan type, product identifier, order status, invoice references, subscription status, renewal status, refund status, and credit balance changes. We do not directly store full payment card numbers.

7. Cookies, Analytics, and Privacy Choices

FluxArt uses cookies, local storage, and similar technologies in the following categories: strictly necessary, preferences, analytics and performance, and marketing.

Strictly necessary technologies are required for login, authentication, account security, checkout, fraud prevention, language settings, and core service operation. These cannot be disabled through our cookie controls.

Preference technologies help remember choices such as language, theme, and interface settings. Analytics and performance technologies help us understand page visits, feature usage, errors, performance, and product usability. This includes Plausible, Vercel Analytics, Vercel Speed Insights, Google Search Console, and Microsoft Clarity.

FluxArt does not currently use advertising cookies or retargeting pixels. If we enable marketing cookies later, we will update this Policy and request consent where required.

You can manage non-essential cookies through the Cookie Preferences link in the footer. You can also control cookies through your browser settings. If your browser sends a Global Privacy Control signal, FluxArt will treat it as an opt-out from sale or sharing of personal information where applicable. FluxArt does not sell personal information.

8. How We Share Information

We do not sell your personal information. We share information only when needed to provide and secure FluxArt, comply with law, process payments, operate infrastructure, deliver email, provide support, analyze usage, prevent fraud, or complete a transaction or generation request you initiate.

Service providers include authentication providers, Creem for payment and billing, Brevo for email delivery and customer communication, S3-compatible storage providers, AI model/API providers used for the selected workflow, hosting and database providers, analytics and performance tools, and support or security vendors we use for the service.

We may also disclose information if required by law, legal process, or to protect the rights, safety, property, and integrity of FluxArt, our users, our service providers, or the public.

9. Data Retention

We keep information for as long as needed to provide FluxArt, maintain account history, comply with legal obligations, resolve disputes, enforce agreements, process refunds, prevent abuse, maintain security, and protect the service.

Retention periods vary by data type, processing purpose, account status, user choices, legal obligations, provider requirements, and technical constraints. We do not keep personal information indefinitely on a just-in-case basis, and we review deletion requests against the purposes and exceptions described below.

When you submit a privacy request, we may need to verify your identity and understand the scope of the request. We aim to respond within the timeframe required by applicable law, and where no specific legal timeframe applies, we generally aim to respond within 30 days.

Retention Schedule

Data Category	How Long We Keep It	Deletion and Exceptions
Account and profile data	Kept while your account is active and as needed to operate FluxArt, authenticate access, provide support, and protect the service.	If you request account deletion, we review and remove or restrict eligible account data from active account systems where legally required and technically available. Records needed for security, billing, fraud prevention, legal compliance, refunds, or disputes may be retained.
Uploaded media and generated outputs	May remain in your account history while the relevant creation history is active, so you can view, download, retry, or manage prior creations.	Deleting a creation may remove or hide it from active account history. It may not immediately remove media URLs, storage objects, thumbnails, caches, backups, billing records, security logs, or copies held by AI model/API providers under their own practices.
Prompts, settings, and task metadata	Kept with creation records and generation history as needed to provide results, support retries, debug failures, run safety checks, prevent abuse, and answer support requests.	When a creation is deleted or a deletion request is honored, we take reasonable steps to remove or isolate eligible active-system records. Some diagnostic, safety, billing, fraud-prevention, or dispute records may remain where necessary.
Billing, credits, subscriptions, refunds, and payment events	Kept as needed to process transactions, manage credits and subscriptions, handle refunds, maintain accounting and tax records, prevent fraud, and resolve payment disputes.	FluxArt does not store full card numbers. Creem and other payment-related providers may keep payment records under their own privacy, security, tax, accounting, and dispute-resolution requirements.
Support, privacy, and legal communications	Kept as needed to respond to requests, document our response, manage follow-up, protect accounts, and comply with legal obligations.	We may retain a record of privacy, refund, abuse, security, or legal requests even after other account data is removed, where necessary to show how the request was handled or to protect the service.
Operational, security, fraud-prevention, and abuse records	Kept for as long as reasonably needed to secure FluxArt, investigate errors, detect misuse, enforce terms, prevent repeat abuse, and protect users and service providers.	These records may be retained after account or creation deletion where necessary for security, fraud prevention, legal compliance, or dispute handling.
Backups, caches, and provider systems	Backup and cache copies are overwritten, isolated, or deleted according to our and our providers' technical cycles and operational needs.	Deletion from active FluxArt systems does not always immediately delete backups, caches, logs, storage replicas, or third-party provider copies. Legal holds, security investigations, disputes, or technical constraints may extend retention.
Aggregated or de-identified information	May be kept for analytics, reliability, safety, and product improvement where it no longer identifies you.	We do not try to re-identify aggregated or de-identified information.

10. Security

We use reasonable technical, organizational, and administrative measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

No internet, AI processing, or electronic storage system is completely secure. You are responsible for keeping your account credentials safe and for using care when uploading sensitive files.

11. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. You may also have the right to opt out of marketing communications.

California residents may have rights to know, access, correct, delete, opt out of certain sale or sharing of personal information, and receive non-discriminatory treatment for exercising privacy rights. We do not sell personal information.

EU, UK, and similar-region users may have rights to access, rectify, erase, restrict, object, port data, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority. Our processing may be based on performance of a contract, legitimate interests, legal obligations, consent, or other applicable legal bases.

You can manage some information through your account settings. For requests that are not available in the product, contact us using the email address below. We may need to verify your identity before completing a request.

12. Children and Minors

FluxArt is not intended for children under 13, or a higher age where required by local law. Users under 18 should use FluxArt only with involvement and consent from a parent or legal guardian.

Do not upload or generate sexual, exploitative, abusive, deceptive, or otherwise unsafe content involving minors. If we learn that we collected personal information from a child in a way that violates applicable law, we will take reasonable steps to delete it.

13. International Transfers

FluxArt may process information in countries other than the country where you live. Those countries may have data protection laws that differ from your local laws. We take reasonable steps to protect information when it is transferred internationally.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and may provide additional notice through the service or by email when appropriate.

15. Contact Us

FluxArt is owned and operated by Ethan Zhang. If you have questions or requests about this Privacy Policy, contact us at privacy@fluxart.org.