Privacy Policy

This Privacy Policy explains what information Ghost Palette (“we,” “us,” or “our”) collects when you use the Service, how we use it, and the choices you have. It applies to everyone who creates an account or otherwise uses Ghost Palette.

1. Information We Collect

Account information. When you sign up, our authentication provider (Clerk) collects your email address, name, and (optionally) a profile image, and manages sign-in.

Generations. Every prompt you submit and every image or video you generate is stored in your account automatically, so it appears in your Gallery. This includes the prompt text, the model used, generation settings (such as seed and dimensions), and the resulting media file. You can delete a generation at any time from the Gallery.

Reference images.If you upload a reference image for the Refine workflow, it’s sent to the selected AI model provider to generate output; it is not separately stored by us beyond what’s needed to complete that request.

Billing information. If you purchase credits or subscribe to a paid plan, our payment processor (Stripe) collects your payment details directly. We receive and store your subscription status, plan, and credit balance — never your full card number.

Usage and technical data. We and our infrastructure providers automatically log technical information such as IP address, browser type, device information, and request timestamps, primarily for security, debugging, and abuse prevention.

2. How We Use Information

• To operate the Service — authenticate you, run generations, and show you your Gallery;
• To process payments and manage your credit balance and subscription;
• To communicate with you about your account, transactions, or changes to our policies;
• To detect, prevent, and respond to fraud, abuse, and security issues; and
• To maintain and improve the reliability and performance of the Service.

We do not use your prompts or generated content to train AI models we operate, and we do not sell your personal information.

3. Who We Share Information With

We share information only with the service providers (“processors”) that help us operate Ghost Palette, each bound to use it only to provide their service to us:

• Clerk — authentication and account management;
• Supabase — database and storage for your generations and account data;
• Stripe — payment processing and subscription billing;
• fal.ai (and other integrated AI model providers) — performing the image/video generation you request, which requires sending the relevant prompt and reference image to that provider;
• Resend — delivering transactional emails (e.g., receipts, account notices); and
• Vercel — application hosting and infrastructure.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

4. Cookies

We use a session cookie set by our authentication provider (Clerk) that is strictly necessary to keep you signed in — the Service can’t function without it. We do not currently use advertising or third-party tracking cookies. If that changes, we’ll update this policy and, where required, ask for your consent first.

5. Data Retention

We retain your generations until you delete them or close your account. We retain account and billing records for as long as your account is active, and afterward only as long as needed for legitimate business or legal purposes (e.g., tax and accounting records).

6. Your Rights and Choices

You can review and delete individual generations from your Gallery at any time. To access, export, correct, or delete your account and associated data, contact us at hello@ghostpalette.app. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to or restrict certain processing; we’ll honor applicable requests consistent with those laws.

7. Children’s Privacy

Ghost Palette is not directed to, and we do not knowingly collect personal information from, anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

8. International Data Transfers

Our service providers may process and store information in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, and we can’t guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date above and, for material changes, provide additional notice.

11. Contact

Questions about this Privacy Policy or your data? Email hello@ghostpalette.app.