Privacy Policy
How we collect, use and protect your personal data and what rights you can exercise
Introduction
This policy explains how All8AI handles your personal data, uploaded files, and generated content. By using the service, you acknowledge that you have read and understood this policy.
What information we collect
We collect account information such as your email address, password hash, and sign-in method; usage data such as access logs, IP address, browser, device, and activity timestamps; generation data such as prompts, uploaded images or videos, results, and credits used; and subscription and transaction records. Our payment processor handles card numbers, expiration dates, and security codes directly—we do not receive or store them. We may also collect information reasonably necessary to operate the service, maintain security, or comply with legal obligations.
Why we collect this information
We process this information as necessary to provide the service and perform our contract with you. This includes verifying your identity, running generation jobs, calculating credit usage, processing payments, detecting and preventing abuse, troubleshooting, improving the service, responding to support requests, and complying with applicable law or valid government requests.
Content processing and moderation
To meet legal obligations and prevent prohibited content, we automatically screen prompts, uploaded files, and generated results. These checks may use local blocklists and third-party classification models. We retain moderation decisions and rejection records where necessary for abuse prevention and compliance audits. Because these checks are required to operate the service safely, they cannot be disabled separately.
Third Party Services and International Transfers
We share only the data required to provide the service with vendors that supply AI processing, cloud storage, payment processing, email delivery, and content moderation. Their servers may be located in the United States, the European Union, or other jurisdictions, so your data may be transferred internationally. We limit each transfer to what is necessary and require appropriate confidentiality and security safeguards.
Data retention
We retain account information while your account remains active. After deletion, we delete or de-identify it within a reasonable period unless the law requires longer retention, such as for tax or transaction records. Generated files may be removed from our object storage after a period of time, so download anything you need to keep. We retain moderation records only as long as reasonably necessary to prevent abuse.
Your rights
Subject to applicable law, you may ask to access or receive a copy of your personal data, correct or supplement it, restrict or stop its collection or use, or have it deleted. You cannot waive these rights in advance. Contact us at the email address below; after verifying your identity, we will respond within a reasonable period. If fulfilling a request means we can no longer provide the service, we will tell you beforehand.
California privacy rights
If the California Consumer Privacy Act applies to us and you are a California resident, you may have the right to know what personal information we collect, use, and disclose; request deletion or correction; receive a portable copy; opt out of the sale or sharing of personal information; limit certain uses of sensitive personal information; and exercise these rights without discrimination. Submit a request using the contact email below. We may need to verify your identity before completing it. You may also use an authorized agent where permitted by law.
Sale and sharing of personal information
We do not sell personal information for money. Some analytics or advertising activities may be treated as “sharing” under California law depending on how they are configured. Where required, you may request to opt out by contacting us at the email below. We do not knowingly sell or share the personal information of anyone under 16.
Data security
We protect your data using measures such as encryption in transit, access controls, and password hashing. No method of transmission or electronic storage is completely secure. If a personal-data breach occurs, we will notify affected users as required by law.
Minors
The service is not directed to anyone under 18. A person under 18 may use it only with permission from a parent or legal guardian. If we learn that we collected a minor’s personal data without the required consent, we will delete it.
Changes to this policy
We may update this policy when the law or the service changes. We will post material changes here and update the date below. If a change materially affects your rights, we will also notify you by email.
Contact Us
For questions about this page or to exercise your data rights, email us at: [email protected]
Last updated: 2026-08-12