Privacy Policy

AiVizWiz is operated by Studio w230 — Simone Leonelli of New South Wales, Australia, who is the data controller for your personal information. For any privacy-related request you can reach us at simone@w230.net.

• Authentication data: If you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. If you use a passphrase, we set a session cookie but do not collect a profile.
• Content data: The prompts you submit, images you upload, and the images and videos generated for you. These are stored against your account so you can access your history.
• Technical & usage data: Your IP address, timestamps, the feature or model used, request status, and similar metadata. We use your IP address for security, abuse prevention, and rate limiting.
• Payment data: If you purchase credits, payment processing is handled entirely by Stripe. We receive confirmation of the transaction, the amount, and your email — we never see or store your full card details.
• Cookies: We use a session cookie (aivizwiz_session) and Supabase auth cookies that are strictly necessary to keep you logged in. We do not use third-party advertising, tracking, or analytics cookies.

Where the GDPR or similar laws apply, we rely on: performance of a contract (to provide the studio and process your generations), legitimate interests (security, abuse prevention, and improving the Service), and legal obligation (tax and accounting records for purchases).

• To authenticate you and maintain your session.
• To process your prompts and uploads through AI generation APIs.
• To store your generation history and manage credit balances.
• To prevent abuse, secure the Service, and fix bugs.
• To process purchases and keep required financial records.

We do not sell or rent your personal data, and we do not share it for third-party marketing.

We share data with the following providers strictly to operate the Service. Some are located in, or process data in, countries outside your own — including the United States. Where required, these transfers are covered by the providers’ data processing agreements and standard contractual clauses or equivalent safeguards.

• fal.ai (US) — receives your prompts and images to run the AI models.
• Supabase — authentication, database, and content storage.
• Google — processes OAuth sign-in.
• Stripe — handles payment processing.
• Vercel — hosts and serves the application.

Each provider operates under its own privacy policy, which we encourage you to review.

Session cookies expire after 7 days. Account data, prompts, and generated content are kept while your account is active and for a reasonable period afterwards, unless you ask us to delete them sooner. Transaction records may be retained longer where required by tax or accounting law. When data is no longer needed, we delete or anonymise it.

We use HTTPS encryption, signed session tokens, secure cookie flags, and row-level access controls so users can only read their own data. While we take reasonable measures to protect your data, no system is 100% secure.

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, to object to certain processing, and to lodge a complaint with your local data protection authority (in Australia, the OAIC). To exercise any of these rights, email simone@w230.net and we will respond within the timeframe required by law.

AiVizWiz is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be noted on this page with an updated “Last updated” date.