Privacy Policy

1. Information we collect

• Account information. Your email address and a securely hashed version of your password. We never store your password in plain text.
• Billing information. When you subscribe, your payment is processed by Stripe, which collects and processes your payment details directly. We do not receive or store your full card number. We store a Stripe customer identifier, your plan, and your subscription status and renewal date so we can provide and manage your access.
• Content you upload. The images and videos you submit for processing (your "Input") and the processed results (your "Output"). These are used only to perform the processing you request and to maintain the quality and security of the Service. We retain your Input and Output for a short period — no longer than 7 days — for quality assurance, troubleshooting, and abuse prevention, after which they are automatically and permanently deleted. We do not use your Input or Output to train or develop machine-learning models, and we do not sell or share them.
• Usage information. The number of generations you make and related timestamps, which we use to enforce plan limits and operate the Service.
• Technical information. Your IP address, browser and device information, and server log data, collected automatically to keep the Service secure, prevent abuse, and diagnose problems. Our delivery and security provider, Cloudflare, processes some of this data on our behalf.
• Cookies. We use a single essential cookie to keep you signed in; it is not used for advertising. Where we use analytics or advertising tools (see below), we may use additional cookies or similar technologies and, where required by law, ask for your consent.

2. Advertising and analytics

We may advertise Max Realism on platforms such as Meta (Facebook and Instagram). To measure and improve those ads, we may use the Meta Pixel or similar measurement tools, which can set cookies and share limited event data — such as page views or purchases — with the advertising platform. Where required by law, we ask for your consent before setting non-essential cookies, and you may decline. These tools are governed by the providers' own privacy policies.

3. How we use information

We use the information we collect to: create and operate your account and authenticate you; provide the media-processing Service; process payments and manage subscriptions; enforce plan limits and prevent fraud and abuse; secure, maintain, and improve the Service; send you transactional messages such as account, billing, and security notices; measure and improve our marketing; and comply with our legal obligations.

4. Legal bases (EEA / UK)

Where the GDPR applies, we process personal data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service, preventing abuse, and measuring marketing), with your consent (for non-essential cookies and certain marketing), and to comply with legal obligations.

5. How we share information

We do not sell your personal information. We share it only with:

• Service providers that operate the Service on our behalf, including Stripe (payments), Cloudflare (delivery and security), our cloud hosting provider (server hosting), and our email provider (account and support email);
• Advertising platforms such as Meta, only as described above and where permitted;
• Authorities or other parties when required by law, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or Elyon Tech LLC;
• A successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. International transfers

We operate from and host the Service in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and possibly other countries, which may have data-protection laws different from those in your country. Where required, we rely on appropriate safeguards for such transfers.

7. Data retention

We keep your account information for as long as your account is active and as needed to provide the Service. Inputs and Outputs are retained for no longer than 7 days for quality assurance and abuse prevention, then permanently deleted. We retain billing and transaction records for as long as required for tax, accounting, and legal compliance. We may retain limited information as necessary to comply with law, resolve disputes, and enforce our agreements.

8. Security

We protect your information using measures such as encryption in transit (HTTPS), hashed passwords, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the European Economic Area or the UK, you have rights under the GDPR. If you are a California resident, you have rights under the CCPA/CPRA to know, delete, and correct your personal information and to opt out of its sale or sharing — and, as noted, we do not sell your personal information. You will not be discriminated against for exercising these rights. To exercise any right, email us at [email protected]; we may need to verify your identity. EEA and UK users may also lodge a complaint with their local supervisory authority.

10. Children's privacy

The Service is not directed to, and is not intended for, anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Third-party links

The Service may link to third-party sites and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, take reasonable steps to notify you. Your continued use of the Service after the changes take effect constitutes acceptance.

13. Contact

Elyon Tech LLC is the data controller for personal information processed through the Service. To contact us about this Policy or to exercise your rights, use the details below.