Privacy Policy

This policy explains what information MuseFrames collects, how it is used, and the rights you have.

Information we collect

Account information: name or store name, email address, and your password stored in encrypted form (we cannot see your password in plain text).

Your content: uploaded images, the requirements you enter, generated images and videos, templates and brand profiles.

Usage records: task history, credit transactions, download and login records, support tickets, and IP addresses and browser information recorded for security purposes.

Where you came from: when you sign up we record the first page you opened, the referring site and campaign tags (UTM), your country or region, interface language and device type, plus an encrypted, irreversible digest of your IP address (used to spot bulk sign-ups; the address itself is not kept).

Usage and visit analytics: page views, clicks, page load speed and errors, plus session recordings (what you do on this website's pages; passwords and API keys are masked). Once you log in, this data is linked to your account. See the PostHog item below and the Cookie Policy.

Payment information: collected and processed directly by Waffo. We only receive the order status and never have access to your bank card details.

How we use information

Providing the Service: completing generation tasks, saving your works, and issuing and deducting credits.

Account and security: sending verification and password-reset emails, and preventing abuse and fraud.

Customer support: replying to the tickets and emails you send us.

Improving the product: we measure and analyse sign-up sources, feature usage, generation success rates, paid conversion and retention, and use session recordings to find problems people run into, in order to improve the product, pricing and promotion. We do not sell your personal information, and we do not use your content to train AI models.

Who we share it with

To complete a generation you request, the images and instructions it needs are sent to the generation models: images are generated by OpenAI GPT Image 2.5, Google Nano Banana (Gemini image models), ByteDance Seedream and Alibaba Qwen Image, and videos by ByteDance Seedance and xAI Grok Imagine Video, all accessed through the WaveSpeed platform. Product analysis and content moderation use Z.ai GLM-5.3 Flash (accessed through OpenRouter), falling back to Google Gemini 3.8 Flash through WaveSpeed when it is unavailable. See the AI Generation Disclosure for the complete list.

Infrastructure providers: Cloudflare (network acceleration and file storage), Resend (email delivery) and Waffo (payments). They process data only on our instructions.

PostHog (product analytics, data stored in the United States): records page views, clicks, session recordings and account events such as sign-up, generation, payment and refund. Once you log in, this data is linked to your account ID, email, name and plan. It reaches PostHog through our own domain. Browsers with Global Privacy Control (GPC) turned on do not load PostHog.

Meta Platforms (ad measurement): records page views on our public pages (home, pricing, help, legal) and, when you create an account or complete a payment, sends those events to Meta together with your SHA-256-hashed email and account ID, IP address, browser information, order amount and Meta's _fbp / _fbc cookies, so we can measure and optimise our ads on Facebook and Instagram. Your creations, your instructions and your card details are never included. Nothing is sent on our mainland-China domain, nor when your browser has Global Privacy Control (GPC) turned on. See the Cookie Policy for details.

Where required by law, we may provide information to the relevant authorities in accordance with the law.

Storage and retention

Data is stored on our servers and in Cloudflare storage, and all transfers are encrypted with HTTPS. Content you move to the Trash can be restored; once you choose "Delete permanently" in the Trash, the files are deleted from storage. After an account is deleted, we delete the associated data within 30 days, except for transaction records that we are required by law to keep.

Your rights

You can view, download and delete your works and edit your account details at any time. To export or delete your account data, please email [email protected].

Minors

The Service is intended for merchants and creators and is not directed at minors under the age of 16.