Privacy Policy
What we collect when you use SoonMaker, why we hold it, who it is shared with, and the choices you have.
Last updated: Draft · not yet in effect
Draft — not yet in effect. This document is a working draft that has not been reviewed by legal counsel and is not binding. It is published so the product’s links resolve; treat nothing here as final.
1. What we collect
Account data: your email address and the identifiers returned by your sign-in provider.
Content data: images and prompts you submit, and the results generated from them.
Usage and billing data: credit consumption, generation history, plan status, and payment records held by our payment processor.
2. How we use it
To run the service — authenticating you, executing generations, and showing your history.
To operate billing and enforce credit limits and plan entitlements.
To keep the service safe, including enforcing the acceptable-use rules in our Terms.
We do not use your uploads or generated results to train AI models.
3. Who it is shared with
Third-party AI model providers: the content you submit is transmitted to the provider of the model you selected, in order to produce your result. Their handling is governed by their own terms.
Infrastructure and payment providers: hosting, storage, and payment processing act on our instructions.
We do not sell personal data.
4. Visibility of your generations
Free-tier results appear in the public community gallery. Paid-plan generations are private by default.
This is a product behaviour, not only a policy statement — check your plan before uploading anything you would not want shown publicly.
5. Cookies
Sign-in cookie: keeps you signed in after you log in. It is needed for the service to work.
Source cookie (sm_attr): a first-party cookie that remembers which link brought you to SoonMaker — for example the campaign or referring site in the link — for up to 60 days. When you create an account, we store that source with your account so we can tell which channels people come from. We do not use it to follow you across other websites. If you are in the EU, EEA or UK, we only set it after you accept.
Analytics cookies (Google Analytics 4): we use Google Analytics to measure how the site is used. It sets its own cookies (named _ga and _ga_…, by default valid for up to two years) and sends page-view data to Google. If you are in the EU, EEA or UK, it is only loaded after you accept; elsewhere it loads by default.
Choice cookie (sm_consent): remembers whether you accepted or declined, for up to 180 days. If you decline, we do not set the source cookie, we delete it if it exists, and we do not load Google Analytics.
6. Retention
Account and generation data is retained while your account is active so you can access your history.
You can delete generations from your account.
To delete your account, email [email protected] from the address on the account. We will delete your account data within a reasonable period, including the stored signup source, and tell you what we kept. We may keep records we must retain for legal or accounting reasons, such as payment records.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing.
To exercise them, contact [email protected].
8. Changes and contact
We may update this policy. Material changes will be signalled by an updated effective date on this page.
Questions about privacy: [email protected].