Privacy Policy

AINARX, established in the Netherlands.

Chamber of Commerce (KvK) number: [KVK NUMBER]

Registered address: [REGISTERED BUSINESS ADDRESS]

VAT number (where applicable): [VAT NUMBER]

Contact: hello@ainarx.com

Account data: your email address and account identifier, created when you sign up with email and password or with Google sign-in. Passwords are handled by our authentication provider and are never visible to AINARX.

Generation entitlement data: your generation balance and whether your free generation has been used.

Generation events: a record that a generation was spent (and whether it was refunded back to your balance), used to keep your balance correct.

Purchase data: pack purchased, generations credited, amount, currency, environment, payment status, Stripe session and payment reference, and the immediate-start consent you gave at checkout (consent flag, timestamp, consent version and language).

Campaign/brief information: the product, description, audience, offer details, style, colour, text and branding fields you enter in the generator.

Uploaded product images and logos: processed to generate your designs.

Browser storage: your language preference and, temporarily, a draft of your generator brief.

Requests you send us: withdrawal requests and privacy requests, including the email address and any optional reason you provide.

Technical and error logging: limited technical information needed to operate the service and diagnose faults. We never log passwords, authentication tokens, card details, API keys or the contents of uploaded images.

To provide the service and perform our agreement with you: account creation and login, generation balance, image and text generation, purchases and support.

To comply with legal obligations: financial and tax administration, and handling statutory withdrawal and privacy requests.

For our legitimate interests: keeping the service secure, preventing abuse and fraud, and diagnosing technical faults.

Lovable Cloud / Supabase — application hosting, database and authentication.

OpenAI — AI image generation. Your brief and, where you upload them, your product image and logo are sent to OpenAI to create your designs.

Lovable AI Gateway with Google Gemini — AI generation of captions and hashtags.

Stripe — payment processing for generation packs, including the checkout interface.

Google — Google sign-in (OAuth) if you choose it, and Google Fonts where web fonts are loaded from Google.

Some of these providers may process data outside the European Economic Area. Where that happens, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

AINARX never receives or stores your card details; card data is handled by Stripe.

Uploaded product images and logos are not permanently stored on AINARX servers.

Generated designs are not permanently stored on AINARX servers — download the designs you want to keep.

AINARX currently uses no analytics tools, no advertising pixels and no behavioural tracking or profiling.

AINARX uses only necessary and functional storage:

Authentication/session storage — keeps you signed in.

Language preference — remembers your NL/EN choice.

Generator draft — temporarily keeps the brief you were working on so it is not lost when you sign in or buy a pack.

Stripe checkout storage and cookies — set by Stripe to run and secure the payment.

Google sign-in storage and cookies — set by Google if you use Google sign-in.

Because we place no analytics, advertising or tracking technologies, no cookie consent banner is used.

Generator draft in your browser: automatically expires after a maximum of 24 hours, and you can clear it earlier by clearing your browser storage.

Language preference: kept until your browser storage is cleared.

Account information (including email, balance and generation events): kept while it is needed for your account and the service, subject to applicable legal requirements.

Financial and purchase administration, including purchase and consent records: kept for the periods required by law (in the Netherlands generally seven years for tax administration).

Uploaded images and generated designs: not persisted server-side by AINARX.

Other personal data: kept only as long as reasonably necessary for the purpose it was collected for.

You have the right to access, rectification, erasure, restriction of processing, objection and data portability, and the right to withdraw consent where processing is based on consent.

Signed-in users can submit an access or deletion request under Privacy & Data in their account; you can also email hello@ainarx.com.

A deletion request does not automatically delete records that AINARX is legally required to retain, such as certain financial administration.

You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We apply reasonable technical and organisational measures: encrypted connections, server-side handling of all API keys, row-level access rules so you can only read your own records, server-side enforcement of the generation balance, and signature verification of payment webhooks.

No online service can be guaranteed to be completely secure, and we make no claims of formal certifications.

Questions about this policy or your data: hello@ainarx.com.