Privacy Policy

What We Collect

When you use memacta, we collect:

• Account information — your name, email, and profile image from Google when you sign in with OAuth.
• Generation data — the prompts you submit, the models you use, any reference images you upload, and the generated outputs themselves.
• Usage data — timestamps of generations, credit balance, success/failure logs, and moderation events (so we can improve the service and stop abuse).
• Anonymous session cookies — a local counter so users who haven't signed up yet can try a limited number of generations before creating an account.

Third-Party Processors

memacta is a thin layer over several third-party services. Your data passes through these processors under their own privacy terms:

• fal.ai — receives your prompts, uploaded images, and model parameters to run the generation. See their privacy policy.
• Google — provides OAuth sign-in. We receive your email, name, and profile image; Google receives that you signed in to memacta.
• Supabase — hosts the Postgres database storing your account, library, and credit ledger.
• Vercel — hosts the web app and collects server logs (IP address, request path, status codes) for up to 30 days.

How We Use Your Information

We use the information we collect to (i) run the service — process generations, track credit balance, display your library — (ii) enforce safety — moderate prompts, detect abuse of rate limits, investigate terms violations — and (iii) improve memacta by analysing aggregate usage patterns. We do not sell your personal information, and we do not use your prompts or outputs to train our own models.

Data Retention

Account data, generation history, and credit ledger entries are retained while your account is active. Moderation events (when a prompt gets rejected) are retained for 90 days for abuse-pattern analysis. Server logs are retained for up to 30 days. Deleting your account removes your account data within 30 days; anonymised aggregate metrics may persist.

Your Rights

You have the right to access, correct, export, or delete your personal information. You can also request we restrict processing or object to specific uses. To exercise these rights, email privacy@memacta.app — we respond within 30 days.

Children's Privacy

memacta is not intended for users under 16. We do not knowingly collect information from children under that age. If you believe a child has provided us with information, email privacy@memacta.app and we will delete it.

Contact

For privacy-related inquiries, reach out to privacy@memacta.app or through the contact page.