Privacy Policy

1. Information we collect

• Account information: your email address. If you sign in with Google, Google shares your name, email address, profile picture and Google account ID with us, and we store them with your account.
• Prompts and generated images: when you generate a panorama, we receive the text you write and the settings you choose, and we store the resulting images in your account. They are private unless you share one: a shared panorama and its description can be seen by anyone with its link, including on websites where it is embedded, until you stop sharing it.
• Reference photos: if you generate from a photo, we receive the photo (reduced in size by your browser), send it to OpenAI to create the panorama, and delete it as soon as the generation has finished.
• Images in the free tools: the panorama viewer, map-to-globe and cubemap tools run entirely in your browser. Images you open in them are not uploaded to us.
• Payment information: payments are handled by Stripe. We receive a customer ID, what you bought and the status of your subscription. We never see your card details.
• Credits: your credit balance and a history of credits added and used.
• Technical information: your IP address and browser details are recorded with each sign-in session and in our server logs. To give the free signup credits only once per person, we also keep a one-way hash of your email address (normalised, so variations of one address count as one) and the network you signed up from (your IP address, or its /64 block for IPv6).

2. How we use it

• To provide the service: signing you in, generating panoramas and keeping them available to you.
• To send sign-in emails. We don't send marketing emails.
• To process payments, add credits and manage your plan.
• To prevent abuse of free credits, keep the service secure and fix problems.
• To understand how visitors find and use the site, with Google Analytics on our public pages (see sections 4 and 5).
• To meet legal obligations.

We don't sell your personal information, we don't show ads, and we don't use your prompts or images to train AI models.

3. How long we keep it

• Account information, credit history, prompts and generated images are kept until you delete your account (see section 6).
• Sign-in links expire after 10 minutes. Sessions expire after 30 days without a visit.
• Records of purchases are kept for as long as tax and accounting rules require, including after you delete your account.
• The hash and network recorded for the free signup credits are kept after you delete your account, so the credits can't be claimed again.
• Server logs are kept for a few days.

4. Service providers

We use these providers to run the service. Each receives only what it needs for its task:

• Cloudflare: hosting, database, image storage, server logs and Turnstile, a check on the email sign-in form that tells people from automated sign-ups (it looks at your browser and IP address).
• OpenAI: image generation. It receives your prompts, settings and any reference photo to create the image. Under OpenAI's API terms, data sent through its API isn't used to train its models.
• Resend: sends sign-in emails. It receives your email address.
• Stripe: payments. Depending on where you live, Stripe may act as the reseller and merchant of record for your purchase.
• Google: Google Analytics measures visits to our public pages (pages viewed, how you arrived, approximate location and device type) and steps such as starting a generation or a checkout. It isn't used on sign-in pages, signed-in pages or these legal pages, except to record a completed purchase (what was bought and its price). It never receives your prompts, photos or images. Google also signs you in if you choose to sign in with Google.

These providers may process data in the United States and other countries. Where the law requires it, transfers rely on appropriate safeguards such as the providers' standard contractual clauses.

5. Cookies

• A sign-in cookie keeps you signed in for up to 30 days.
• During Google sign-in, short-lived cookies protect the sign-in from being tampered with.
• A cookie (ai360_device) remembers for two years that this browser already has an account, so the free signup credits aren't given again to another account created in it.

On our public pages, Google Analytics sets cookies (such as _ga) to count visits, except for visitors in the European Economic Area, the United Kingdom and Switzerland: there it runs without cookies, sending only cookieless measurement. We don't use advertising cookies. You can also block analytics with your browser settings or Google's opt-out browser add-on.

6. Your choices and rights

• Download or delete any of your panoramas at any time from My panoramas. Deleting one removes its image files from our storage.
• Cancel your subscription and see your invoices from the Account page (Manage billing).
• Delete your account by emailing support@ai360generator.com from the address you sign in with. We delete your account, prompts and images, and cancel any subscription.

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have the right to access, correct, delete or export your personal information, and to object to or restrict its processing. To make a request, email support@ai360generator.com. You may also complain to your local data protection authority.

7. Security

All traffic is encrypted with HTTPS. We don't use passwords: you sign in with a one-time email link or with Google. No method of transmission or storage is completely secure, but we work to protect your information.

8. Children

The service is not directed to children under 16, and we don't knowingly collect their personal information.

9. Changes to this policy

When we change this policy, we update the date at the top. If a change is significant, we'll let you know by email or with a notice on the site before it takes effect.

10. Contact

Questions or requests about privacy: support@ai360generator.com.