Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect the following types of information when you use RPD Create:

  • Account data: When you sign up, we receive your name, email address, and profile image from Clerk, our authentication provider. If you sign up using a social login (Google, GitHub), we receive the information you authorize.
  • Generation prompts: The text prompts, images, videos, and other inputs you provide to generate content are stored to process your request and display your generation history.
  • Usage analytics: We collect anonymized usage data including pages visited, features used, generation types, and performance metrics to improve the Service.
  • Billing information: Payment processing is handled by Stripe. We do not store your credit card details. We receive transaction confirmations and subscription status from Stripe.

2. How We Use Information

  • To provide and operate the Service, including processing your AI generation requests
  • To manage your account, credits, and subscription
  • To communicate with you about your account, updates, and support requests
  • To enforce our Terms of Service and Content Policy, including automated content moderation
  • To improve the Service through aggregated, anonymized usage analysis
  • To detect and prevent fraud, abuse, and security threats
  • To comply with legal obligations

3. Data Sharing

We share your generation prompts and input media with third-party AI providers to process your generation requests. The providers we currently work with include:

  • Fal.ai
  • Replicate
  • Stability AI
  • Kling AI (Kuaishou)
  • Luma AI
  • Google Cloud (Veo)
  • HeyGen
  • Runway
  • Pika Labs

Each provider processes your data according to their own privacy policy and data processing terms. We select providers that meet our standards for data protection.

We also share data with the following service providers:

  • Clerk — authentication and user management
  • Stripe — payment processing
  • Cloudflare — content delivery and R2 storage
  • Neon — database hosting
  • PostHog — product analytics

We do not sell your personal information to third parties. We do not share your data with advertisers.

4. Data Retention

Generation outputs: Generated images and videos are retained for 14 days on the Free plan and 90 days on paid plans. After the retention period, generated files are permanently deleted from our storage. We recommend downloading any content you wish to keep.

Generation metadata: Prompts, parameters, and generation records (without the output files) are retained for the duration of your account for history and billing purposes.

Account data: Your account information is retained until you request account deletion. Upon deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax compliance).

5. Your Rights

GDPR (European Economic Area residents):

  • Right of access: Request a copy of all personal data we hold about you
  • Right to export: Receive your data in a portable, machine-readable format
  • Right to erasure: Request deletion of your personal data and account
  • Right to rectification: Request correction of inaccurate personal data
  • Right to restrict processing: Request that we limit how we use your data

CCPA (California residents):

  • Right to know what personal information we collect and how it is used
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information — we do not sell your personal information
  • Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Cookies

RPD Create uses the following cookies and similar technologies:

  • Clerk session cookies: Essential cookies required to maintain your authenticated session. These cannot be disabled while using the Service.
  • PostHog analytics: We use PostHog for product analytics to understand how users interact with the Service. PostHog cookies track anonymized usage patterns. You can opt out of analytics tracking in your account settings.

We do not use advertising cookies or tracking pixels from ad networks.

7. Children's Privacy

RPD Create is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information and terminate the associated account. If you believe a child under 13 is using the Service, please contact us at [email protected].

8. EU AI Act Compliance

In compliance with the European Union AI Act, RPD Create implements the following transparency measures:

  • Content Credentials: All AI-generated content produced through RPD Create includes C2PA (Coalition for Content Provenance and Authenticity) Content Credentials embedded as metadata. This allows anyone to verify that the content was AI-generated.
  • AI disclosure: We clearly disclose that content produced through our platform is generated by artificial intelligence systems. The specific AI provider and model used for each generation is recorded and available in your generation history.
  • Provider transparency: We identify which AI provider and model is used for each generation request, so users understand which system created their content.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 30 days before taking effect. We encourage you to review this page periodically. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].