Privacy Policy

Last updated: June 2025. Effective immediately.

This Privacy Policy explains how StudioUI (“we,” “us,” “Operator“) collects, uses, and protects personal information when you use the StudioUI hosted AI generation service at https://studioui.ai and any site that connects to our hosted gateway. We are committed to compliance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Account information

When you create an account, we collect your username, email address, and a hashed password. If you purchase credits or a Pro plan, your name and billing details are handled directly by Stripe (we do not store full card numbers).

Prompts and inputs

To fulfil generation requests, we collect and process the text prompts, uploaded reference images, configuration parameters, and other inputs you submit. These inputs are transmitted to third-party AI providers to generate your requested output. See Section 4 for the list of providers and how your data is used.

Generated outputs

Generated images, videos, GIFs, audio, and text outputs are stored in your account gallery. You may delete them at any time from your account. We retain completed job records (including the prompt) for up to 90 days for debugging and moderation purposes, then delete them.

Payment information

Credit purchases and Pro subscriptions are processed by Stripe. We receive a transaction reference and amount from Stripe but do not receive or store your full card details. WooCommerce stores your billing name and email for order records. See the Stripe Privacy Policy at stripe.com/privacy.

Usage and technical data

We collect your IP address, browser user agent, session timestamps, generation counts, and error logs. This data is used to enforce rate limits, detect abuse, diagnose issues, and improve the service.

Cookies

We use essential cookies for authentication (WordPress login session) and WooCommerce cart/checkout state. We use Cloudflare cookies for security and performance (Cloudflare is our CDN/proxy provider). We do not use advertising or tracking cookies. You can disable cookies in your browser but this will prevent login and checkout from functioning.

2. How We Use Your Information

• To provide and operate the AI generation service.
• To process payments and manage credit balances and subscriptions.
• To enforce the Acceptable Use Policy and detect abuse, fraud, or illegal content.
• To send transactional emails (account confirmation, payment receipts, password reset). We do not send marketing email without your explicit consent.
• To comply with legal obligations, including reporting illegal content to authorities.

3. Disclosure of Information

We do not sell your personal information. We disclose your information only to:

• Third-party AI providers (see Section 4) — your prompts and inputs are sent to these providers to process generation requests.
• Stripe — payment processing.
• Cloudflare — CDN, DDoS protection, and DNS for studioui.ai and related domains. Cloudflare processes request metadata (IP, headers) to deliver the service.
• Hostinger — web hosting infrastructure. Hostinger stores our website files and databases on servers in the EU/Singapore.
• Law enforcement or regulatory authorities — where required by law or court order, or to report illegal content (including mandatory NCMEC reporting for CSAM).

4. Third-Party AI Providers and International Data Transfers

When you submit a generation request, your prompt and inputs are sent to the AI provider handling that request. Depending on the model selected, this may include:

• OpenAI (USA) — image generation (DALL-E) and text (GPT). Privacy Policy: openai.com/policies/privacy-policy
• Black Forest Labs (BFL) (Germany) — FLUX image models.
• fal.ai (USA) — video generation.
• Luma AI (USA) — image and video generation.
• Replicate (USA) — image generation. Pro/BYO only.
• Stability AI (USA/UK) — image generation. Pro/BYO only.
• ElevenLabs (USA) — voice/audio generation.
• DeepSeek (China) — text/chat. Pro/BYO only. Data may be processed in the People's Republic of China. By enabling this provider, you explicitly consent to this transfer.
• ComfyUI (self-hosted) — for hub operator and Pro/self-host users, generation may run on the operator's own GPU infrastructure.

Each provider has its own privacy policy and data retention practices. We recommend reviewing them before use. By using the service, you consent to your inputs being transmitted to the applicable provider(s) for your chosen generation type and model.

Your personal information (email, account details) is not shared with AI providers — only the generation inputs (prompts, uploaded images) are transmitted.

5. Data Retention

• Account data: retained while your account is active and for 30 days after deletion.
• Generation jobs (prompts + outputs): stored in your gallery until you delete them, plus up to 90 days in server logs.
• Payment records: retained for 7 years as required by Australian tax law.
• Moderation logs: retained for 12 months to detect patterns of abuse.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or out-of-date information (via account settings or by contacting us).
• Delete your generated content (via gallery settings) and request deletion of your account.
• Complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the APPs.

To exercise these rights or make a privacy enquiry, contact us at studioui.ai.

7. Data Security

We implement reasonable security measures including HTTPS (TLS) in transit, encrypted storage for sensitive settings, hashed passwords (bcrypt via WordPress), and Cloudflare firewall protection. No system is completely secure; we cannot guarantee absolute security of your data.

8. Children

This service is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or on-site notice. The date at the top indicates when the policy was last revised.

10. Contact and Complaints

For privacy enquiries, access requests, or complaints: studioui.ai. If we do not resolve your complaint to your satisfaction, you may lodge a complaint with the OAIC at oaic.gov.au/privacy/privacy-complaints.