Privacy Policy

Last updated: 8 June 2026

This Privacy Policy explains how Sartoris ("we", "us", or "our") collects, uses, and protects your personal data when you use sartoris.ai (the "Service"). We are the data controller for the personal data described here. If you have any questions, contact us at support@sartoris.ai.

We aim to collect as little personal data as is needed to run the Service.

1. What We Collect

• Account data: your email address and a securely hashed version of your password. We never store your password in plain text.
• Payment data: when you buy credits, payment is handled by our third-party cryptocurrency payment provider. We receive confirmation that a payment succeeded and a reference for it; we do not receive or store your wallet details or private keys.
• Content you provide: the prompts you enter, images you upload, and the images or video you generate.
• Technical and usage data: information such as your IP address, browser type, and basic logs generated when you use the Service, used for security, debugging, and preventing abuse.
• Cookies: we use a strictly necessary session cookie to keep you logged in. We do not use advertising cookies.

2. How We Use Your Data and Our Legal Bases

We process your personal data on the following bases recognised by most data protection laws:

• To provide the Service (performance of our contract with you): operating your account, processing generations, managing your credit balance, and delivering results.
• For payments (performance of a contract and legal obligation): processing purchases and keeping necessary records.
• For security, abuse prevention, and improving the Service (our legitimate interests): including screening uploaded images, monitoring for misuse, and maintaining logs.
• To comply with the law (legal obligation): including, where required, reporting unlawful content such as child sexual abuse material to the appropriate authorities.
• With your consent, where we ask for it (for example, the acceptance you give before using certain features).

3. Sharing Your Data

We do not sell your personal data. We share data only with service providers that help us run the Service, and only as needed:

• AI generation provider — to process your prompts and images and return generated content.
• Cryptocurrency payment provider — to process credit purchases.
• Email provider — to send account emails such as verification and password resets.
• Hosting and storage / content delivery providers — to run the application and to store and serve generated media.

These providers process data on our behalf or as independent controllers for their part of the process. Some of them may process data in countries other than your own; where that happens, we rely on appropriate safeguards as required by applicable law. We may also disclose data where required by law or to protect rights, safety, and the integrity of the Service.

4. How Long We Keep Data

• Account data is kept while your account is active and deleted (or anonymised) within a reasonable period after you close your account, unless we must retain certain records to meet legal obligations.
• Uploaded images and generated media are stored only for a limited retention period and are then deleted automatically. Short-lived input images used to process a job are deleted after the job completes or after the retention window.
• Logs are kept only as long as needed for security and operational purposes.

5. Your Rights

Depending on where you live, you may have rights over your personal data, including the right to access it; to have inaccurate data corrected; to have your data erased; to restrict or object to certain processing; and to data portability. To exercise any of these, contact us at support@sartoris.ai. You may also have the right to lodge a complaint with the data protection authority in your country.

6. Security

We take reasonable technical and organisational measures to protect your data, including hashing passwords, transmitting data over encrypted connections, and restricting access to systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.

8. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, for example by posting the updated Policy in the Service.

9. Contact

For any privacy questions or requests, contact us at support@sartoris.ai.