Privacy Policy

At aicomicbuilder ("we", "us", or "our"), safeguarding your privacy, creative ideas, and personal data is fundamental to our mission. This Privacy Policy details the types of personal data we collect when you access our website, utilize our AI-powered comic generator, design character consistency models, or purchase subscription credits, and explains how that data is used, protected, and shared.

We adhere to applicable data privacy frameworks, including the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

We collect information in three ways: directly provided by you, automatically gathered through technical usage, and received from trusted payment processors:

• Account & Profile Information: When you register an account, we collect your email address, chosen username, password hash (salted and hashed via bcrypt), and optional display name and avatar. If you log in via Google or GitHub OAuth, we receive your public OAuth name, profile image, and verified email address.
• Creative Inputs & Generation Content: To generate comics, we collect your submitted story ideas, script dialogues, visual prompt descriptions, selected styles, and any character anchor reference photos you upload for consistency injection.
• Payment & Transaction Metadata: Financial transactions are processed directly by our payment processor, Stripe Inc. aicomicbuilder never collects, stores, or sees your full credit card number or CVV code. We receive transaction confirmation tokens, subscription status, billing intervals, currency, and masked card brand/expiration details for accounting.
• Technical & Usage Information: When you browse the platform, our servers automatically log standard technical data, including IP address, browser type and version, device information, operating system, timestamped session actions, and referral URLs.

If you are an individual residing in the European Economic Area (EEA), United Kingdom, or Switzerland, our processing of your personal data is governed by the following legal grounds under Article 6 of the GDPR:

• Performance of a Contract: Providing you with account authentication, comic generation tools, character consistency services, and credit accounting.
• Legitimate Interests: Securing our infrastructure against bot attacks, maintaining platform uptime, monitoring system errors, and improving prompt optimization pipelines.
• Legal Compliance: Maintaining financial transaction records, tax reporting, and responding to statutory legal requests.
• Consent: When you explicitly choose to publish your comics to the public Community Gallery or opt into marketing notifications.

Transparency regarding how generative AI models handle your creative works is paramount:

When you generate a comic panel, your sanitized prompt and reference anchors are transmitted over encrypted TLS channels to specialized GPU inference endpoints strictly for the duration required to render the image.

We use strictly necessary and functional cookies to ensure aicomicbuilder functions smoothly:

• Authentication Cookies: Secure session tokens (via NextAuth) that keep you safely logged in while you work in the studio.
• Preference Cookies: Remembering your chosen UI theme (dark/light) and language/locale preferences.
• No Behavioral Ad-Tracking Cookies: We do not deploy third-party advertising cookies, cross-site tracking beacons, or data broker analytics that follow you across the internet.

You can configure your browser to reject or delete cookies; however, disabling essential session cookies will prevent you from signing in to your account.

We partner with industry-leading sub-processors to deliver high-performance computing, payment processing, and secure cloud infrastructure. All sub-processors are vetted for SOC 2 or ISO 27001 compliance and operate under strict Data Processing Agreements:

We implement comprehensive technical and organizational safeguards designed to protect personal data against unauthorized disclosure, loss, or misuse:

• Encryption in Transit: All web traffic and API communications are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: Database backups and cloud file storage are encrypted using AES-256 standard encryption.
• Password Protection: Passwords are never stored in plaintext. We utilize bcrypt with high work factor salting.
• Access Controls: Internal administrative database access is strictly restricted based on principle of least privilege, requiring multi-factor authentication.

We retain your personal data for as long as your account remains open and active to allow you continuous access to your generated comics, character consistency libraries, and credit balances.

Account Deletion: If you choose to delete your account, your profile data, uploaded character reference photos, and unpublished comic panels are permanently expunged or anonymized from our production databases within thirty (30) days, except where retention is legally required for financial audit or statutory compliance.

Depending on your physical location and applicable laws, you hold fundamental rights concerning your personal information:

• Right of Access & Portability: You may request a copy of the personal information we hold concerning your account in a portable format.
• Right to Rectification: You may correct or update inaccurate profile details directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account and all associated comic assets.
• Right to Restriction & Objection: You have the right to object to or limit certain processing of your personal information.
• Non-Discrimination (CCPA): We will never deny services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.

To exercise any of these rights, simply email our compliance team at support@aicomicbuilder.com. We verify and respond to all verified requests within 30 days.

aicomicbuilder is not designed for or directed toward children under the age of thirteen (13). We do not knowingly collect, solicit, or store personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA).

If we learn that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will promptly delete that information from our servers and terminate the associated account. If you believe a child under 13 has registered on our site, please contact us immediately at support@aicomicbuilder.com.

Your information may be transferred to and maintained on cloud servers located outside your state, province, or country, where data protection laws may differ from those in your jurisdiction. Where data is transferred from the European Union or United Kingdom, we rely on European Commission approved Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.

If you have questions, comments, or data privacy requests concerning this Privacy Policy, please reach out to our designated Data Protection team: