Privacy Policy

We collect the following types of information:

• Account Information: email address, username, and avatar (if provided) during registration
• Third-Party Login Information: basic profile data obtained through Google sign-in
• Creative Content: story text, character descriptions, and project settings you submit
• Generated Content: AI-generated images, storyboard scripts, and comic works
• Payment Information: processed through Stripe; we do not store credit card numbers directly
• Usage Data: access logs, feature usage frequency, error reports

We use the collected information to:

• Operate and provide the core functionality of the Service
• Authenticate accounts and perform security verification
• Process payments and credit purchase records
• Send verification emails and security notifications
• Enforce credit limits and anti-abuse controls
• Troubleshoot issues and improve product quality
• Comply with legal obligations

We rely on the following third-party service providers to process data:

• Cloudflare: application hosting, CDN, object storage (R2), database (D1)
• Better Auth: authentication flow
• Stripe: payment processing and credit purchase records
• Third-Party AI Model Providers: image generation tasks (only necessary prompts and reference images are transmitted)
• Google Analytics: anonymized website visit statistics

These providers process data only to the extent necessary to deliver their services and are bound by their respective privacy policies and data processing agreements.

Project content, generated images, and account records are stored on Cloudflare's cloud infrastructure. Data retention periods are as follows:

• Account Data: duration of account + 30 days after deletion (for recovery)
• Creative Content: duration of account, cleared within 30 days of account deletion
• Payment Records: retained as required by law (typically 7 years)
• Security Logs: 90 days

We use the following types of cookies:

• Essential Cookies: authentication sessions, language preferences
• Analytics Cookies: Google Analytics (anonymized; can be disabled via browser settings)

We do not use third-party tracking cookies or advertising cookies.

We implement the following technical and organizational measures to protect your data:

• All data transmission uses HTTPS/TLS encryption
• Passwords stored using bcrypt one-way hashing
• Authentication controls and verification processes
• Request rate limiting and credit enforcement
• Operational logging and anomaly monitoring
• Regular security reviews

No system can guarantee absolute security. If a security vulnerability is discovered, we will promptly notify affected users.

Depending on your jurisdiction, you may have the following rights:

• Right of Access: view the personal data we hold about you
• Right of Rectification: request correction of inaccurate personal data
• Right of Export: export your data and works in a common format
• Right of Erasure: request deletion of your personal data and account
• Right to Object: contest decisions affecting your access rights

To exercise these rights, contact us at privacy@xinghedream.com. We will respond within 30 days.

Your information may be processed in jurisdictions where our service providers operate. Cloudflare's global edge network means data may be cached and processed across multiple regions. By using the Service, you understand that data may be transferred and stored outside your jurisdiction. We ensure all data transfers comply with applicable data protection regulations.

The Service is not directed at children under 13 years of age, and we do not knowingly collect personal data from children under 13. If we discover such data has been collected, we will delete it immediately. If you believe we may hold data belonging to a minor, please contact us.

We may update this Privacy Policy from time to time. Material changes will be communicated via in-service notification or email. Continued use of the Service constitutes acceptance of the updated policy.

For questions about this Privacy Policy or data-related requests, contact:

• Privacy matters: privacy@xinghedream.com
• General support: support@xinghedream.com