Privacy Policy

Last updated: 30 July 2026

What we collect

Account data: your email address and name (from you, or from Google if you sign in with Google — we never see your Google password). Content you provide: text prompts, photos and other files you upload to generate content. Generated content: the outputs we create for you, stored in your library. Usage data: which tools you use, credit balance and transactions, and standard technical logs (IP address, browser type) kept for security and abuse prevention.

How we use it

To operate the service: generating your content, maintaining your library and credit balance, emailing you login codes and job notifications, preventing abuse (rate limits, bot detection), and improving the product. We do not sell your personal data. We do not use your uploads or outputs to train AI models.

Who else processes your data

We use a small number of service providers to run OvenPost: cloud AI infrastructure that processes your prompts and uploads to generate content, an email delivery service for login codes and notifications, Google for optional sign-in, and Cloudflare for bot protection. These providers process your data only to provide their service to us. Your prompts and uploads are sent to AI processing providers only as needed to fulfil your generation requests.

Where your files live and for how long

Generated content and uploads are stored on our servers. Free-tier content may be removed after 30 days. Anonymous (not-signed-in) generations may be removed at any time. Login codes expire after 10 minutes. Security logs are kept up to 90 days. When you delete your account, uploads and generated files are deleted within 30 days (backup copies within 90 days).

Cookies

We use one essential cookie to keep you signed in. No advertising or cross-site tracking cookies.

Your rights

Email [email protected] to access, correct, download or delete your data. Under India's DPDP Act (and GDPR where it applies) you may also lodge a complaint with your local data protection authority.

Children

OvenPost is not directed at children under 13, and we delete accounts we discover belong to children under the applicable consent age.

Changes and contact

Material changes to this policy will be announced on the site or by email. Data controller: OvenPost (contact: [email protected]).