Privacy Policy

Clonizer ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Clonizer.io platform ("Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service, including processing your AI generation requests
• Manage your account, credit balance, and transaction history
• Communicate with you regarding your account, including service updates, security alerts, and support responses
• Improve and optimize the Service, including analyzing usage patterns and diagnosing technical issues
• Enforce our Terms of Service and detect, prevent, or address fraud, abuse, and security issues
• Comply with legal obligations and respond to lawful requests from public authorities

We do not sell your personal data. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information only in the following limited circumstances:

• Third-Party AI Model Providers: When you generate content, your prompts and input content are transmitted to the selected third-party AI model provider for processing. These providers process your data in accordance with their own privacy policies and data processing agreements.
• Payment Processor (Lemon Squeezy): When you purchase credits, your payment information is processed by Lemon Squeezy in accordance with its privacy policy.
• Firebase / Google Cloud: We use Firebase for authentication, database, and cloud storage services. Your data is stored and processed on Google Cloud infrastructure.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, safety, or property, or that of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

We use cookies and similar tracking technologies to enhance your experience on the Service. These include:

• Essential Cookies: Required for the Service to function properly, including authentication session cookies managed by Firebase.
• Analytics Cookies: We may use analytics tools (such as Google Analytics or similar services) to understand how users interact with the Service. These tools collect anonymized or pseudonymized usage data to help us improve the platform.
• Preference Cookies: Used to remember your preferences, such as selected models, generation settings, and interface customizations.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

Your data is stored on secure Google Cloud / Firebase infrastructure. We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Secure authentication through Firebase Authentication and Google OAuth 2.0
• Access controls and role-based permissions for internal systems
• Regular security audits and monitoring

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will promptly notify you and relevant authorities in the event of a data breach as required by applicable law.

We retain your personal information and generation data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained for the lifetime of your account.
• Generated content (videos and images) is stored in your gallery and retained until you delete it or your account is terminated.
• Transaction records may be retained for up to 7 years to comply with financial and tax regulations.
• Usage logs are retained for up to 12 months for analytics and security purposes, after which they are anonymized or deleted.

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or legal compliance).

Depending on your location, you may have certain rights regarding your personal information. These may include:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
• Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances.
• Right to Object: Object to processing of your personal data for specific purposes, such as direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws apply to our processing of your personal data. In addition to the rights listed in Section 8, you have the following protections:

• Legal Basis: We process your personal data based on your consent (authentication via Google OAuth), the performance of our contract with you (providing the Service), our legitimate interests (improving the Service, preventing fraud), and compliance with legal obligations.
• International Transfers: Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable, to protect your data during such transfers.
• Data Protection Officer: For GDPR-related inquiries, you may contact us at [email protected].
• Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority if you believe we are processing your personal data in violation of the GDPR.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for which it is used.
• Right to Delete: You can request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. You will not receive different pricing or quality of service for making a request.
• No Sale of Personal Information: We do not sell personal information as defined under the CCPA. We do not share personal information for cross-context behavioral advertising.

To exercise your CCPA rights, contact us at [email protected]. We will verify your identity before fulfilling your request.

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we discover that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] so we can take appropriate action.

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party service you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date at the top. For significant changes, we may also notify you by email or through the Service.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For GDPR-related requests or data subject access requests, please include "GDPR Request" or "CCPA Request" in the subject line of your email.