Legal
Privacy Policy
Effective Date: April 22, 2026 · Last Updated: April 22, 2026
Introduction
eyegenerate is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Platform. By accessing or using eyegenerate, you consent to the practices described here. This Policy is incorporated by reference into the Terms of Use..
1. Information We Collect
1.1 Account Information
Email address, username, display name, avatar, bio, social links, and invite code used.
1.2 Authentication and Security
Hashed passwords (bcrypt — never stored in plaintext), MFA methods (TOTP setup, hashed backup codes, temporary OTPs), OAuth provider identifiers (Google, GitHub, Apple — we store only the provider ID and email), and session and device metadata such as IP address, device name or user-agent, plus creation and expiry timestamps.
1.3 Identity Verification
For payout eligibility and fraud prevention, we may collect government ID type and issuing country, verified name and date of birth returned by the identity verification provider, and a one-way verification fingerprint hash for duplicate-account detection. Raw document images are processed by our provider and are not retained longer than necessary.
1.4 Subscription and Payment Information
We do not store payment card details. Payments are handled by our third-party crypto processor. We retain subscription plan and status, invoice records, payment confirmation events, and your payout wallet addresses.
1.5 Earnings and Referral Data
Referral relationships, commission amounts (pending, available, paid, reversed), and withdrawal history maintained in our internal ledger.
1.6 Generated Content
Prompts, parameters, generated outputs and metadata, content ratings, visibility settings, and credit consumption records.
1.7 Usage and Technical Data
IP address, approximate geographic location (country or region), browser and device type, pages visited, features used, error logs, and timestamps.
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and operate the Platform | Contract performance |
| Process subscription payments and renewals | Contract performance |
| Process withdrawal requests | Contract performance |
| Track referral commissions | Contract performance |
| Identity verification and fraud prevention | Legitimate interests / Legal compliance |
| Detect and prevent duplicate accounts | Legitimate interests |
| Enforce Terms and policies | Legitimate interests |
| Respond to support requests | Legitimate interests |
| Send service notifications | Contract performance |
| Send marketing communications | Consent |
| Comply with laws and court orders | Legal obligation |
| Analyze and improve Platform features | Legitimate interests |
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (active) | Duration + 3 years after closure |
| Security event logs | 1 year |
| Session records | 90 days after session expiry |
| Identity verification records | Per retention policy / legal minimum |
| Raw identity document images | Deleted promptly after verification |
| Payment & invoice records | 7 years |
| Commission ledger entries | 7 years |
| Admin audit logs | 5 years |
| Generated content | Until deleted by user or account closure |
| Support communications | 3 years |
5. Security
We implement TLS encryption for data in transit, encryption at rest for sensitive fields, bcrypt password hashing, SHA-256 hashed refresh tokens, session management with device visibility, multi-factor authentication for admin accounts, role-based access controls, and immutable audit logs for sensitive operations. No system is infallible; if a breach is likely to affect your rights, we will notify you and the relevant authorities as required by law.
6. Your Rights
Depending on your jurisdiction, you may have the right to access a copy of your personal data, correct inaccurate data, request deletion subject to legal retention obligations, receive your data in a portable format, object to processing based on legitimate interests, restrict processing, and withdraw consent where applicable.
To exercise any right, contact privacy@eyegenerate.com.. We respond within the timeframes required by applicable law.
8. Children's Privacy
The Platform is exclusively for users 18 years or older. We do not knowingly collect data from minors. If you believe a minor has registered, contact privacy@eyegenerate.com..
9. Changes to This Policy
We may update this Policy at any time. Material changes will be communicated at least 14 days before taking effect. Continued use constitutes acceptance.
10. Contact
Privacy inquiries: privacy@eyegenerate.com
General support: support@eyegenerate.com
powered by rogeriogt.com