Privacy Policy

1. What stays on your machine

Prompts, generated images and videos, and all workflow execution happen locally or on rented hardware controlled by you. We do not host, view, store, or process your generations. Because they are never transmitted to us, we cannot access or store them.

2. Controller

The controller responsible for the processing of personal information described in this policy is the operator of ahegao.red.

For any privacy question or request, you can reach us at privacy@ahegao.red.

3. Personal information we collect

• Account data: collected via Civitai OAuth when you sign in: your Civitai identifier, display name, email address, and avatar URL.
• Purchase and entitlement data: processed by our payment provider, covering transaction IDs and the products granted to your account. We never receive your payment card details; the provider handles payment processing.
• License data: your license key and its association with your account, used to validate registry pulls.
• Analytics data: collected via PostHog when you use the website: pages viewed, interactions (e.g., button clicks), device type and browser type. PostHog stores a random identifier in a first-party cookie and in your browser’s local storage to count unique visitors and recognize you across visits; the identifier contains no personal data. No user profiles are created for anonymous visitors.
• Communication data: if you email us, we collect your message and contact details.

4. Why we process personal information

• Performance of a contract: operating your account, granting and validating licenses, and processing purchases and entitlements.
• Consent: marketing emails (opt-in). You can withdraw consent at any time.
• Legitimate interests: securing the Services, preventing fraud and abuse, developing and improving the Services, and audience measurement (aggregated and non-identifying).
• Compliance with legal obligations: retaining purchase records and responding to lawful requests.

5. How we disclose personal information

• Service providers: our payment processor, Civitai (authentication), PostHog (analytics), Render (hosting); each processes only the information necessary to perform its function.
• Legal purposes: to comply with laws or respond to lawful requests, and to protect our rights, property, and safety.
• Business transfers: in connection with a merger, acquisition, or similar transaction.

6. International data transfers

Some of our service providers process personal information in countries other than the one you are in: PostHog (analytics), Render (hosting), Civitai (authentication), and our payment processor.

Where personal information is transferred to another country, we rely on recognized transfer frameworks and contractual protections, and we handle it in accordance with this policy.

7. Retention

We retain personal information as long as needed to provide the Services, maintain your entitlements, and comply with legal obligations. Account and purchase records are kept while your account exists; analytics data is retained per PostHog’s default retention settings.

8. Security

We implement commercially reasonable technical and organizational measures, including encrypted transport (TLS), access controls, and isolated credentials, designed to protect personal information from loss, misuse, and unauthorized access.

9. Cookies and analytics

Essential storage: we store strictly necessary information on your device to keep you signed in, remember your preferences (language, theme), preserve a purchase in progress across sign-in, and record your acknowledgement of immediate delivery before checkout. This storage is permitted without consent.

Analytics: we use PostHog to understand how the website is used. PostHog stores a random identifier in a first-party cookie and in your browser’s local storage so we can count unique visitors and recognize you across visits; the identifier contains no personal data and is not used for advertising or cross-site tracking. When you sign in, your account is associated with your activity so purchases and sign-ins can be counted.

This audience measurement is based on our legitimate interest in understanding and improving the website. You may object to this processing or opt out at any time by contacting privacy@ahegao.red, or by blocking storage for this site in your browser settings.

10. Marketing

We only use your contact details for marketing if you have explicitly opted in (e.g., by joining our updates list). You can opt out at any time via the unsubscribe link in our emails.

11. Users must be at least 18

The Services are restricted to adults (18+). We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

12. Your rights and choices

• Access, correct, update, or delete your personal information, subject to applicable legal exceptions.
• Withdraw consent previously granted (e.g., for marketing or analytics) at any time, without affecting prior processing.
• Object to processing or appeal a decision we make about a rights request.
• Depending on your location, additional rights may apply, including data portability and restriction of processing.

13. Exercising your rights

Email privacy@ahegao.red with sufficient information to identify you and describe your request. We will respond within the timeframe permitted by applicable law. You may also exercise your rights through an authorized agent with written permission.

You have the right to lodge a complaint with a competent data-protection authority, in particular in your country of habitual residence.

14. Changes to this policy

We may update this policy from time to time. Updates are published on this page with a revised “last updated” date.

15. Contact

Privacy questions? Reach us at privacy@ahegao.red.