Privacy Policy

1. Who controls your data

Illya Nikolayev is the controller for the information described here. Registered/service address: Bratislava, Slovakia. Contact: nikmyk777@gmail.com.

2. Data we process

• Account data: name, email address, Google or other authentication identifiers, and account settings.
• Phone verification data: your number is sent to the SMS verification provider to deliver and check the code. WealthSocietyz stores a keyed one-way hash of the normalized number, its last four digits, and verification time to enforce account limits; it does not store the raw number in its application tables.
• Brand and project data: brand profiles, prompts, instructions, drafts, generated text, project status, and saved outputs.
• Uploaded content: faces, people, logos, products, photos, and visual references you choose to upload.
• Billing data: credit purchases, balances, usage ledger, Stripe customer/session/payment identifiers, amount, currency, and payment status. We do not receive your full card number.
• Technical and security data: IP address and request, authentication, device, error, and server logs produced by our hosting and infrastructure providers.
• Support communications and any information you include in them.

3. Why we process it

• Contract: create and secure your account, store projects, generate content, deliver downloads, process credit purchases, and provide support.
• Legitimate interests: prevent fraud and abuse, secure the service, diagnose errors, and improve reliability.
• Legal obligations: accounting, tax, payment, consumer-protection, and lawful authority requests.
• Consent: optional analytics or marketing, if introduced and separately enabled. You may withdraw consent at any time.

4. AI processing

Your prompts and selected uploads are sent to contracted AI providers only when needed to produce the result you request. Outputs may contain inaccuracies. Do not upload sensitive personal data, confidential material, or another person’s image unless you have a lawful basis and permission to use it.

5. Providers and international transfers

We use Supabase for authentication, database, and storage; Railway for backend processing; Vercel for the web application; Stripe for checkout, payment, fraud prevention, tax and managed-payment services; Twilio Verify for SMS ownership checks; Google when you choose Google sign-in; and configured AI model providers for generation. Some processing may occur outside the EEA. Where required, transfers rely on an adequacy decision or appropriate safeguards such as standard contractual clauses.

6. Retention

Account, brand, project, and generated content is retained while your account remains active or until you delete it, subject to backup cycles and legal obligations. Billing and transaction records may be retained for the period required by tax and accounting law. To prevent repeated signup-credit abuse after account deletion, we retain a keyed one-way hash of an email identity that already received the gift; the claim record does not contain the readable email. Security logs are kept only as long as reasonably needed for security and diagnosis.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. You can delete your account from Account settings and may complain to the Slovak data-protection authority or the authority where you live.

8. Security and children

We use access controls, signed payment webhooks, private storage rules, and server-side credit enforcement. No online service is risk-free. The Studio is not directed to children under 16.