Legal
Privacy Policy
1. Scope
This Privacy Policy explains how MajoFlow ("we", "us") collects, uses, shares, and protects personal information when you use our websites, applications, and services (the "Service"). It applies to information we handle as the controller. The Service is operated by the MajoFlow Team; once our operating entity is established, its details will be published here.
2. Information We Collect
- Account information — email address and authentication data you provide to register and sign in.
- Content you create — prompts, uploaded references, projects, characters, assets, and generation history you store in the Service.
- Usage and generation records — actions you take, models used, MANA consumption, and task history needed to operate the Service and support you.
- Billing records — records of purchases and orders needed to operate paid products. Payment card details are handled by our payment providers; we do not store your full card number or security code.
- Device and log data — technical data such as IP address, browser type, and timestamps, collected automatically to keep the Service secure and reliable. We also store the IP address observed at registration and at your most recent sign-in to understand the approximate geographic distribution of our users.
- Site usage statistics — on our public pages, sign-in and sign-up pages, and subscription and checkout pages only, we record how a visit arrived (the referring website's domain and any campaign tags in the link), which of those pages were viewed, which buttons were clicked, and whether a form was completed (form errors are recorded as error types, never what you typed). Each browser tab visit gets a random identifier that is held only in memory and is never stored on your device. If you sign in or create an account during or after such a visit, we link that visit to your account. We do not record this inside the creative workspace (canvases, projects, assets).
- Optional questions after sign-up — the first time you open the app after signing up, we ask a few optional questions: what kind of work you make, what you plan to use MajoFlow for, where you heard about us, and, if you choose to write it, what slows you down most. Your answers (or the fact that you skipped) are stored with your account and used to understand who uses MajoFlow and to improve it. We offer no reward for answering.
- Local storage — see our Cookie Policy. We use only essential and functional storage; no advertising or cross-site tracking, and our site statistics do not use cookies or local storage.
3. How We Use Information
We use your information to: create and maintain your account; process AI generation requests; operate paid products and keep billing records; provide support and respond to inquiries; secure the Service and prevent abuse or fraud; analyze aggregate, non-advertising usage statistics — such as the approximate geographic distribution of users derived from IP addresses, which channels people find us through, and where people leave sign-up or checkout — to improve the Service; and comply with legal obligations. Where the GDPR or similar laws apply, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (where requested), and compliance with legal obligations.
4. AI Processing of Your Inputs
To generate images, video, audio, and text, your prompts and uploaded inputs are transmitted to and processed by third-party AI model providers, depending on the model you choose. Their handling of your inputs is governed by their own terms and privacy policies. Please do not include sensitive personal information in prompts or uploads. We do not use your project content to train our own foundation models.
5. Cookies and Local Storage
We use browser local storage and similar technologies only for functions that make the Service work — keeping you signed in, remembering your theme and settings, and holding creation drafts. We do not use advertising cookies or cross-site trackers. Our site usage statistics (Section 2) do not store anything on your device, and we do not collect them at all when your browser sends a Global Privacy Control or Do Not Track signal. For details, see our Cookie Policy.
6. How We Share Information
We do not sell your personal information. We share it only with service providers ("sub-processors") that help us operate the Service, and only as needed for them to perform their function:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, backend | Account, content metadata, usage records |
| Cloudflare | Hosting, CDN, object storage (media), cookieless aggregate web analytics (Cloudflare Web Analytics) | Uploaded and generated media, log/technical data, page-view and referrer data |
| Stripe / Creem | Payment processing | Email, purchase, amount, tax, transaction identifiers |
| AI model providers | Generating images, video, audio, text | Your prompts and uploaded inputs |
| Google Fonts | Web fonts for the interface | Technical data such as IP address (at request time) |
We may also disclose information where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or MajoFlow. If the Service is involved in a merger, acquisition, or asset transfer, information may be transferred as part of that transaction, subject to this Policy.
7. International Transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers. By using the Service, you understand that your information may be processed in these locations.
8. Data Retention
We keep personal information for as long as your account is active or as needed to provide the Service, and afterward only as necessary to comply with legal, tax, accounting, security, or dispute-resolution obligations. When no longer needed, we delete or anonymize it. You can request deletion as described below.
9. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS) and access controls at our infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. If you are in the EEA/UK (GDPR) or California (CCPA/CPRA), these rights include:
- the right to know what personal information we hold and to access a copy;
- the right to correct inaccurate information;
- the right to delete your information (subject to legal exceptions);
- the right to data portability;
- the right to object to or restrict certain processing, and to withdraw consent;
- the right to non-discrimination for exercising your rights. We do not sell or "share" personal information for cross-context behavioral advertising.
To exercise any right, email [email protected]. We will verify and respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.
11. Children's Privacy
The Service is intended for adults and is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If you believe someone under 18 has provided us information, contact us and we will delete it.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be reflected in the effective date above and, where appropriate, communicated to you. Significant changes may also prompt the storage notice to reappear.
13. Contact Us
Privacy questions or requests: [email protected] or [email protected].
This document is provided for transparency and is pending final legal review.
