Privacy Policy

Recreate ("we", "our", or "us") is an AI image generation platform available at https://recreate-studio.app. This Privacy Policy explains how we collect, use, and protect information about you when you use our services.

By using Recreate, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

Account information. When you sign in with Google OAuth, we receive your name, email address, and profile picture from Google. We store this to identify your account.

Usage data. We record the AI images you generate, edit, and upload — including prompts, model selections, credit transactions, and project data — so we can provide the service and show you your history.

Payment information. We use Stripe to process payments. We never store full card numbers or bank account details on our servers. Stripe stores your payment method and billing address on our behalf. We store only your Stripe customer ID, subscription ID, and plan status.

Technical data. We may log IP addresses, browser type, and request metadata for security monitoring, error diagnosis, and abuse prevention.

• To provide, maintain, and improve the Recreate service
• To process payments and manage your subscription via Stripe
• To enforce credit limits, daily usage quotas, and plan restrictions
• To send essential transactional emails (e.g. payment receipts via Stripe)
• To detect and prevent fraud, abuse, and security incidents
• To comply with applicable laws and legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising.

We share limited data with the following service providers to operate Recreate:

Images you generate using Recreate are stored on Cloudinary and linked to your account. You own the output images you create, subject to the terms of the underlying AI model providers.

We may use anonymised usage statistics (not your specific images) to improve service quality and reliability. We will never publicly display your private generations without your consent.

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. Stripe transaction records are retained for 7 years per financial regulations).

Generated images stored in Cloudinary may be retained for operational purposes. You can request deletion by contacting us.

We use a secure HTTP-only session cookie issued by NextAuth.js to keep you signed in. We do not use advertising cookies or third-party tracking pixels. No cookie consent banner is required under our current cookie usage (strictly necessary cookies only).

We implement industry-standard security measures including HTTPS-only transport, HTTP-only session tokens, Stripe webhook signature verification, and database access via encrypted connections. However, no system is perfectly secure — please use a strong Google account password.

Depending on your jurisdiction (EU/EEA under GDPR, California under CCPA), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to certain processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, email us at rijalsawan@gmail.com. We will respond within 30 days.

Recreate is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of Recreate after changes constitutes acceptance of the updated policy.

For privacy-related questions or data requests, contact us at rijalsawan@gmail.com.