Privacy Policy and Data Protection

1. Categories of data we collect

1.1. Account data: email address, hashed password (PBKDF2-SHA256), display name (optional).

1.2. Technical security data: an anonymised device fingerprint and IP address used solely to prevent spam attacks and multiple registrations (anti-abuse).

1.3. Payment data: the Service does not store card numbers, CVC codes or full wallet details. All transactions are processed on the payment providers' side; the Service never receives or stores payment data.

2. Project privacy (privacy first & opt-in)

2.1. Every project, specification and prototype created by the User is strictly private by default (is_public = False) and available only to the authenticated account owner.

2.2. Publishing a project in the public community showcase or generating a public link for investors happens only with the User's explicit consent and choice (opt-in). The User can revoke public access at any time with one click.

3. Purposes of processing

3.1. Authentication and personalised access to the studio;

3.2. Keeping the generation balance and crediting purchased packs;

3.3. Sending important security notices and support replies;

3.4. Protecting the platform from DDoS attacks and fraud.

4. Right to be forgotten

4.1. The User may at any time request complete deletion of their account and all related projects, files and logs from the database.

4.2. To delete, send a request via the support chat on the Site or by email to [email protected]. Deletion is irreversible and completed within 48 hours.

5. Cookies and analytics

5.1. The Site uses technical cookies and browser local storage solely to maintain the authenticated session (JWT tokens) and to remember interface settings (theme, mock-up zoom).