This Privacy Policy explains what personal data eaicontentstudio.com collects, why we collect it, who we share it with, and the rights you have over it.

Last updated: 27 September 2026

1. Who is responsible for your data

eaicontentstudio.com (the "service", "we", "us") is responsible for the personal data described in this policy. For any privacy question or request, use our contact page.

This policy covers our website and the eaicontentstudio.com application. It does not cover third-party sites we link to, which have their own policies.

2. Data we collect

Data you give us
  • Account data — name, email address, password (stored only as a salted hash), profile details, country and preferred language.
  • Billing data — plan, billing name and address, tax or VAT identifiers, invoice history, and the last four digits and expiry of your payment card. Full card numbers are handled by our payment providers and never reach our servers.
  • Content data — the prompts, documents, images, audio and other material you submit, and the output generated in response.
  • Support and communications — messages you send us, including support tickets and email correspondence.
Data we collect automatically
  • Usage data — features used, credits and tokens consumed, generation history, timestamps and error logs.
  • Technical data — IP address, browser type and version, operating system, device type, language and referring pages.
  • Cookies and similar technologies — see our Cookie Policy for the full list.
Data from third parties
  • Social sign-in — if you register with Google, Facebook, GitHub or X, we receive your name, email address and profile picture from that provider. We never receive your password there.
  • Payment providers — transaction status, and fraud or chargeback signals.

3. Why we use your data, and our legal basis

  • To provide the service — creating your account, generating content, tracking credits, storing your work. Basis: performance of our contract with you.
  • To take payment — processing subscriptions, credit purchases, invoices and refunds. Basis: performance of our contract, and compliance with tax and accounting law.
  • To support you — answering questions and investigating problems. Basis: performance of our contract, and our legitimate interest in good customer service.
  • To secure the platform — detecting fraud, abuse, spam and unauthorised access, and enforcing our Terms and Conditions. Basis: our legitimate interest in protecting the service and its users.
  • To improve the service — understanding which features are used and where errors occur, using aggregated or de-identified data wherever possible. Basis: our legitimate interest in improving our product.
  • To send service messages — billing notices, security alerts and material changes to our terms. Basis: performance of our contract, and legal obligation.
  • To send marketing — product news and offers, only where you have opted in or where permitted for existing customers. Basis: consent, or our legitimate interest. You can unsubscribe at any time.
  • Analytics — measuring site usage in aggregate with Umami, which sets no cookies and does not identify you. Basis: our legitimate interest in understanding how the site is used.

We do not sell your personal data, and we do not use your content to train our own foundation models.

4. AI processing and model providers

To generate content, we transmit your prompts and any files you attach to third-party AI providers, which may include OpenAI, Anthropic, Google and other model or media providers depending on the feature and the model you select. These providers process the data in order to return a result to us.

We use business or API tiers where available, under which providers commit not to use submitted data to train their models by default, and to retain it only briefly for abuse monitoring. Their practices are set by them, not by us, so please avoid submitting sensitive personal data, confidential third-party information, health records, government identifiers or payment card details in your prompts.

5. Who we share data with

We share personal data only as needed, with:

  • AI model and media providers, to generate the content you request;
  • Payment providers, to process transactions and prevent fraud;
  • Hosting, storage and email delivery providers, which run our infrastructure and send our messages;
  • Analytics providers, which receive aggregated, cookie-free usage data;
  • Professional advisers, such as accountants and lawyers, under a duty of confidentiality;
  • Authorities, where we are legally required to disclose data, or where disclosure is necessary to establish or defend legal claims or to protect someone's safety;
  • A buyer or successor, if the business is merged, acquired or reorganised. We will tell you before your data becomes subject to a different privacy policy.

Our service providers act as processors on our instructions and under written agreements that restrict what they may do with the data.

6. International transfers

We and our providers operate internationally, so your data may be processed in countries outside your own, including the United States. Where data leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision or on Standard Contractual Clauses together with appropriate technical safeguards. You can request details of the safeguards we use through our contact page.

7. How long we keep data

  • Account data — for as long as your account is open, then deleted or anonymised within 90 days of closure.
  • Content and generation history — until you delete it, or until your account is closed and the 90-day window elapses.
  • Invoices and tax records — for the period required by law, typically 6 to 10 years.
  • Security and access logs — normally up to 12 months.
  • Support correspondence — normally up to 24 months after the case is closed.

We may retain data for longer where it is needed to resolve a dispute or to comply with a legal obligation.

8. How we protect data

We use encryption in transit (HTTPS), hashed passwords, access controls and role-based permissions, and we restrict staff access to what is needed to run the service. Optional two-factor and one-time-password sign-in are available where enabled on your account. No system is completely secure, so we cannot guarantee absolute security; if a breach affects your personal data and poses a risk to you, we will notify you and the relevant regulator as the law requires.

9. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you, and receive a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to processing, including profiling and direct marketing;
  • receive your data in a portable, machine-readable format;
  • withdraw consent at any time, without affecting processing carried out beforehand;
  • opt out of the sale or sharing of personal data — note that we do not sell or share personal data as those terms are defined under US state privacy laws;
  • not be discriminated against for exercising any of these rights.

You can update most of your details directly in your account settings. For anything else, use our contact page. We will respond within one month, and will tell you if we need longer because the request is complex. We may ask you to verify your identity first. If you are in the EEA or the UK and you are unhappy with our response, you may complain to your local data protection authority.

10. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means. Automated systems are used for abuse and fraud detection, and a human reviews any decision to suspend or terminate an account.

11. Children

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our service and the law change. The revised version will be posted here with a new "Last updated" date, and we will give you reasonable notice of material changes by email or in-app notice.

13. Contact

For any privacy question or to exercise your rights, use our contact page.