Privacy Policy
Last updated: October 24, 2026
This policy explains what Allure AI collects, why, and who processes it for us. We do not sell your data.
What we collect
- Account: your name and email, from Google sign-in or registration.
- Characters and content: descriptions, reference photos you upload, your messages to the Director, and the photos and videos generated for you.
- Telegram: if you connect the bot, your Telegram chat id and the messages you send it.
- Balance: top-ups and generation charges. Card details are handled by the payment provider; we never see them.
- Technical data: IP address, browser and timestamps, for security and fixing errors.
How we use it
To run the Service: sign you in, generate and store your content, plan videos with the Director, send you approvals and finished videos, keep your balance, and prevent abuse. We use it to improve the Service only in aggregate.
Who processes it for us
- Supabase: database, file storage and sign-in.
- Vercel: hosting of the website and video editing.
- WaveSpeed and the AI model providers it connects to: image and video generation from your prompts and reference images.
- Anthropic and DeepSeek: the language models behind the Director and text generation.
- Telegram: delivery of messages if you connect the bot.
- The payment provider: processing your top-ups.
They receive only what is needed for their part of the Service. Some are outside the EU; transfers rely on standard contractual clauses or equivalent safeguards.
How long we keep it
Account data and your content stay until you delete them or your account. Technical logs are kept for up to 12 months. Payment records are kept as long as tax law requires.
Your rights
Under the GDPR you can ask for a copy of your data, its correction or deletion, object to processing, or move it elsewhere. Write to support@allureai.io. You can also complain to the Spanish data protection authority (AEPD).
Cookies
We use cookies to keep you signed in and to remember your preferences. You can block cookies in your browser, but signing in will stop working.