1. Information We Collect

CRESTWAVE AGENCY LTD collects information you provide directly to us, including:

• Account information (username, email address, profile data)
• Image generation prompts and reference images you upload
• Payment information (processed securely through third-party processors)
• Usage statistics and preference settings
• Communications with our support team

2. How We Use Your Information

We use the collected information to:

• Provide AI image generation and editing services
• Process payments and manage subscription billing
• Improve user experience and service quality
• Send important notifications and service updates
• Prevent fraud and abuse of our services
• Comply with legal obligations and enforce our terms

3. Information Sharing

We do not sell, trade, or transfer your personal information to third parties, except:

• With your explicit consent
• When required by law or court order
• To protect our rights, property, or safety
• With trusted third-party service providers (such as payment processors)

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL encryption for data transmission
• Regular security audits and updates
• Limited employee access permissions
• Data backup and recovery procedures

5. Data Retention

We retain your data according to the following principles:

• Free users: Generated images retained for 3 days
• Paid users: Generated images retained for 30 days
• Account information: Retained during account activity period
• Payment records: Retained as required by law

6. Your Rights

You have the right to:

• Access and view your personal information
• Correct inaccurate information
• Delete your account and data
• Restrict or object to certain data processing
• Data portability

7. Cookie Usage

We use cookies and similar technologies to:

• Remember your login status
• Save your preference settings
• Analyze website usage
• Provide personalized experience

8. Third-Party Services

We use the following trusted third-party services:

• Supabase (database and authentication services)
• Stripe (secure payment processing)
• PayPal (alternative payment processing)
• OpenRouter (AI model services powered by nano banana)
• Vercel (website hosting and infrastructure)

These services have their own privacy policies and may collect information independently.

9. 政策更新

我们可能会不时更新此隐私政策。重大变更将通过以下方式通知您：

• 在网站上发布通知
• 发送邮件通知
• 在应用内显示提醒

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: