Privacy Policy

This Privacy Policy applies to ARTIFLOW, a service operated by MaxArt Labs, LLC.

Last updated: June 18, 2026.

Overview

This policy explains how the service collects, uses, stores, and shares information when users browse the app, create guest sessions, sign in, upload photos, submit prompts, and generate listing assets.

Information You Provide

The service may collect information you submit directly, including product photos, prompts, listing text, marketplace preferences, output language preferences, account details, support messages, billing information handled by FastSpring or another authorized payment provider, and any content you choose to upload or generate.

Generated Content And AI Inputs

ARTIFLOW processes uploaded product images, prompts, listing text, generation settings, generated images, localized listing output, and related metadata to provide the service. These materials may be processed by third-party AI and cloud providers strictly as needed to run generation, translation, moderation, debugging, abuse prevention, quality control, and support workflows. ARTIFLOW does not use your private uploaded product content or generated project assets to train public AI models unless a separate policy or consent flow expressly says otherwise. Third-party AI providers may process submitted content under their own contractual and policy terms.

Moderation, Safety, And Abuse Prevention Data

ARTIFLOW may process prompts, uploaded images, generated outputs, account identifiers, guest-session identifiers, request metadata, usage patterns, quota state, cooldown state, hashed IP information, hashed user-agent information, and related operational signals to detect, prevent, review, block, or investigate prohibited use, including NSFW/adult content, deceptive listings, fraud, abuse, and other policy violations. Safety reviews may involve automated systems, manual review, third-party moderation providers, cloud providers, and AI providers as needed to operate and protect the service.

Technical And Usage Data

The service may collect technical information such as device and browser details, operating system, app version, language and locale settings, network information, IP-derived approximate location, request timestamps, page views, app events, clickstream data, crash data, diagnostic logs, and usage metrics needed to operate, secure, debug, and improve the product.

Cookies, Analytics, And Similar Technologies

ARTIFLOW may use cookies, local storage, mobile identifiers, analytics SDKs, and similar technologies to keep users signed in, remember preferences, measure product usage, diagnose errors, protect the service, and understand feature performance. Where marketing or advertising tags are used, they may help measure campaigns or limit repeated messages. You can control cookies through your browser or device settings, but disabling some technologies may prevent parts of the service from working properly.

Guest Session And Abuse Prevention Data

To support guest access and limit abuse, the service may create guest session identifiers and process anti-abuse signals such as anonymous client identifiers, fingerprint-derived values, hashed IP information, hashed user-agent information, quota state, cooldown state, and related operational events. These signals are used for security, fraud prevention, and usage enforcement, not for advertising personalization.

Account And Authentication Data

When you create an account or sign in, ARTIFLOW may process authentication identifiers, email address, provider account identifiers, Cognito user identifiers, session state, access tokens handled by the authentication provider, and related security events. If you use a third-party sign-in provider such as Google or Apple, that provider may share account information needed to authenticate you according to its own policy and your provider settings.

Billing And Payment Data

When FastSpring checkout is used, FastSpring may process payment details, tax information, billing address, payment method information, transaction identifiers, subscription status, refund status, and related billing events. ARTIFLOW may receive and store purchase status, plan, entitlement, renewal, cancellation, refund, tax, and transaction metadata needed to provide paid access, prevent fraud, maintain records, and support billing inquiries. ARTIFLOW does not store full payment card numbers. Mobile purchase flows may involve RevenueCat, Apple, Google, or other authorized app-store billing providers, depending on the platform.

Service Providers And Vendors

ARTIFLOW may rely on vendors and service providers for hosting, storage, authentication, payment processing, app-store purchase management, analytics, crash reporting, customer support, email delivery, security, abuse prevention, content moderation, AI generation, translation, and infrastructure operations. These may include cloud infrastructure providers such as AWS, authentication providers such as Amazon Cognito and third-party sign-in providers, payment providers such as FastSpring, mobile purchase providers such as RevenueCat and app stores, analytics providers, moderation providers, and AI providers. Vendor availability and names may change as the service evolves.

How Information Is Used

The service may use information to provide image generation and related features, authenticate users, maintain project history, enforce quotas, manage paid access, process payments, localize output, detect fraud or misuse, enforce prohibited-content rules, block unsafe outputs, secure the service, debug failures, improve product quality, respond to support requests, send service communications, comply with law, enforce terms, and maintain business records.

Sharing

MaxArt Labs, LLC does not sell personal information through this app. Information may be shared with vendors, infrastructure providers, AI providers, moderation providers, payment processors, authentication providers, analytics providers, support providers, legal authorities when required, professional advisers, or a successor entity in connection with a merger, sale, financing, reorganization, or transfer of the service. ARTIFLOW may also share aggregated or de-identified information that does not reasonably identify a user.

Retention

Information is retained only for as long as reasonably needed to operate the service, provide project history, enforce quotas, prevent abuse, satisfy legal obligations, resolve disputes, support paid access, process refunds, maintain security logs, and keep business records. Account records, project records, uploaded assets, generated outputs, payment metadata, support records, diagnostic logs, guest-session records, moderation records, and anti-abuse records may have different retention periods. Backup copies may persist for a limited period before deletion is technically completed.

Your Choices And Rights

You may choose not to submit certain content, but some features will not work without it. Depending on where you live, you may have rights to request access to personal information, correction, deletion, export, restriction, objection, withdrawal of consent, or information about how data is used and shared. You may opt out of marketing communications by using unsubscribe tools where available or by contacting support. To make a privacy, deletion, export, or account request, contact support@artiflowstudio.com. We may need to verify your identity before acting on a request, and some records may be retained where required for security, fraud prevention, legal compliance, billing, dispute resolution, or legitimate business purposes.

Security

MaxArt Labs, LLC uses reasonable administrative, technical, and organizational measures designed to protect information, including authentication controls, transport security, access restrictions, monitoring, abuse prevention, moderation controls, and provider security controls. No system is completely secure, and the service cannot guarantee absolute security. You are responsible for keeping your account credentials secure and for controlling access to your devices and accounts.

Children

The service is not intended for children who are below the age at which they can legally use the service under applicable law. ARTIFLOW does not knowingly collect personal information from children. If you believe a child has provided personal information, contact support so the issue can be reviewed.

International Use And Transfers

Data may be processed in the United States, Ukraine, the European Union, and other countries where MaxArt Labs, LLC or its service providers operate. These countries may have data protection laws different from those in your location. Where required, ARTIFLOW will rely on appropriate transfer mechanisms or provider safeguards for international processing.

Additional Information For Europe And The United Kingdom

If GDPR, UK GDPR, or similar law applies, MaxArt Labs, LLC acts as the controller for account, product, support, usage, billing metadata, moderation, and service operation data processed for ARTIFLOW. Legal bases may include performance of a contract, legitimate interests, consent, and compliance with legal obligations. Legitimate interests may include service operation, security, fraud prevention, abuse prevention, prohibited-content enforcement, product improvement, support, analytics, and business administration, where those interests are not overridden by your rights. You may have the right to lodge a complaint with a supervisory authority.

Additional Information For United States Users

Depending on your state, you may have rights to know, access, correct, delete, or obtain a copy of certain personal information, and to opt out of certain uses. ARTIFLOW does not sell personal information. If ARTIFLOW later uses data in a way that qualifies as a sale, share, or targeted advertising under applicable state privacy laws, it will provide required notices and choices.

Changes

MaxArt Labs, LLC may update this policy from time to time. Continued use after changes become effective means the updated policy applies. Material changes may be announced in the app, on the website, or by another reasonable method.

Contact

For support, billing, privacy, account deletion, data export, or refund requests, contact support@artiflowstudio.com.

Free Try Retention

To enforce Free Try as one lifetime image per verified email identity, ARTIFLOW derives a keyed, non-email record from the normalized verified email. The raw email is not stored in this record. The record is retained for the service lifetime, including after account deletion and re-registration. Contact support for legally required exceptional-erasure requests.