Privacy policy

What information do we process?

When you log in, we use Supabase to handle email, account identifiers, and login sessions. When you log in with Google, Google provides authorized basic account information; we do not request access to your Gmail or cloud drive.

When using creation features, we save your submitted text, reference images, conversations, canvases, skills, and generated results. Models, task statuses, usage, and credit records are used to complete tasks, display history, reconcile accounts, and handle exceptions.

Payments are processed by Stripe. Coatelier saves payment customer IDs, subscription and billing associations, and credit issuance records, but does not save full bank card numbers or security codes. Accessing the service may also generate basic operational logs such as IP addresses, time, and errors.

What is the information used for?

This information is used to verify accounts, save and restore creations, submit tasks to your selected models, settle credits, process subscriptions, respond to support requests, and troubleshoot abuse and malfunctions. Creative content will not be automatically made public on the homepage or asset library by being saved to the workspace.

We do not use your private creative content for Coatelier's own model training. The processing and retention of requests by third-party models are subject to their policies and service configurations. Please understand the selected service before uploading sensitive content.

Product analytics

To improve the experience, we record page visits, feature interactions, request durations and error categories. A temporary tab identifier helps deduplicate visits; some events are associated with your account after sign-in. Operations analytics do not collect conversation content, images or credentials. Activity records are kept for 90 days. Browser activity reporting is disabled when Do Not Track is enabled.

Which services will receive data

• Supabase: Account login, authentication, and related session information.
• Google: Participates in identity authorization only when you choose to log in with Google.
• OpenRouter and selected model providers: Prompts, selected text or text used as context, and reference images required for model tasks.
• Stripe: Information required for payments, subscriptions, invoicing, and anti-fraud.
• Deployment and email service providers: hosting, runtime logs, and customer service emails you actively initiate.

These services may process information in different countries or regions. Actual locations and retention arrangements depend on the deployment region and your chosen model provider. We do not sell workspace content as public assets.

Browser Storage & Cookies

We use essential cookies or browser storage to keep you signed in, remember interface preferences, and retain unsynced copies of your work. We do not use advertising tracking cookies. Your account records on our servers are the primary copy of your workspace; unsynced browser copies are used only for recovery if saving fails.

Clearing browser data may delete unsynced content. Please log out when using public devices and do not keep private assets in shared browsers.

Keep, Export, and Delete

We retain creative content while your account is in use so you can keep editing and reusing it. You can delete conversations or canvas content, request your account data through support, and download individual images. Deleting content in the interface does not guarantee immediate removal of related files, backups, or financial records.

To cancel your account, delete personal materials, or inquire about/correct personal information, please contact us via Contact support Submit request. We will process it after verifying account ownership; some records may need to be retained for accounting reconciliation, dispute resolution, security, or legal obligations. Data in backups will be handled with backup rotation.

Your content and others' information

Please only upload content you are authorized to use. For photos of people, ensure you have the necessary authorization. Do not submit passwords, keys, full payment information, or unnecessary sensitive personal information.

Policy updates and contact

We will publish the update date on this page. Significant changes involving processing purposes or methods will be communicated through appropriate means. Privacy questions and rights requests can be made via Contact support Submit.