Privacy Policy

1. Information We Collect

Depending on how you use QJORA AI, we may collect the following types of information.

Account Information

This may include:

• your email address
• authentication information
• account identifiers
• account status
• login and security information

Creative Content

This may include:

• uploaded reference images
• prompts
• image-editing instructions
• generated images
• saved creations
• other content you choose to submit through QJORA AI

Usage Information

This may include:

• image-generation activity
• credit balances
• credit transactions
• subscription status
• purchase history
• technical logs
• error information
• security and fraud-prevention information

Payment-Related Information

This may include:

• purchased subscriptions or credit packs
• payment status
• transaction identifiers
• refund information
• dispute information

Full payment-card details are generally handled by Stripe and are not directly stored by QJORA AI.

2. How We Use Information

QJORA AI may use collected information to:

• create and manage user accounts
• authenticate users
• process AI image-generation requests
• process uploaded reference images
• save creations to private galleries
• track image-credit balances
• manage subscriptions and credit purchases
• process refunds and disputes
• prevent duplicate credit awards or reversals
• send confirmation, password-reset, security, account, and transactional emails
• detect fraud, abuse, or unauthorized activity
• troubleshoot technical problems
• maintain service reliability
• protect QJORA AI and its users
• comply with legal obligations

3. Uploaded and Generated Images

Reference images are transmitted to QJORA AI's image-generation provider to perform the generation or edit requested by the user. QJORA AI does not intentionally save uploaded reference images to the customer's private gallery or Cloudflare D1 database.

Successfully generated images are stored in a private Cloudflare R2 gallery associated with the authenticated account. They do not currently have a fixed application-level expiration period.

Users must own or have permission or lawful authority to use uploaded images, people's likenesses, and any protected material contained in a reference.

QJORA AI does not guarantee permanent storage of generated content. Users should download and maintain their own copies of important images.

4. AI Service Providers

QJORA AI currently uses OpenAI as its image-generation provider. QJORA AI sends prompts, uploaded reference images, and related generation instructions to OpenAI when necessary to provide image-generation or image-editing services.

Those providers may process information according to their own terms, privacy policies, and service configurations.

QJORA AI does not control every independent data-processing decision made by third-party providers.

5. Payments

QJORA AI uses Stripe to process payments.

Stripe may collect and process information such as:

• payment-card information
• billing details
• transaction information
• fraud-prevention information
• payment status

Stripe’s handling of information is governed by Stripe’s own privacy policy.

QJORA AI may receive payment-related information necessary to manage subscriptions, credit balances, refunds, disputes, and account access.

6. Authentication, Database, and Storage

QJORA AI uses:

• Supabase for customer authentication and login-related account information
• Cloudflare D1 for application records such as credit balances, usage records, billing references, generation reservations, and fraud-prevention information
• Cloudflare R2 for private generated-image storage
• Stripe for payment processing, subscriptions, credit-pack purchases, refunds, and disputes
• OpenAI for AI image generation and image editing

These providers process information as necessary to operate QJORA AI and according to their applicable terms, privacy policies, and service configurations.

7. Email Communications

QJORA AI may use Resend or a similar transactional-email provider to send:

• signup confirmation emails
• password-reset emails
• account notices
• security notifications
• transactional messages
• important service communications

Receiving essential account and security communications may be necessary to use certain QJORA AI features.

8. Private Galleries

Generated content saved to a QJORA AI gallery is associated with the authenticated user account.

QJORA AI uses access controls intended to prevent one user from accessing another user’s private gallery.

No online service can guarantee absolute security, and users should maintain their own backups of important content.

9. How We Share Information

QJORA AI may share information with third-party service providers when necessary to operate the service.

These providers may support:

• AI image generation
• authentication
• database services
• cloud hosting
• file storage
• payment processing
• email delivery
• fraud prevention
• security
• analytics
• technical support

QJORA AI may also disclose information when required by applicable law, legal process, court order, or valid government request.

QJORA AI does not sell your payment-card information.

10. Data Retention

QJORA AI may retain information for as long as reasonably necessary to:

• provide the service
• maintain user accounts and private galleries
• track credits and prevent duplicate trial awards
• process billing and accounting
• prevent fraud
• resolve disputes
• enforce our Terms of Service
• comply with legal obligations

Generated gallery images currently remain in Cloudflare R2 without a fixed application-level expiration period unless they are deleted through an approved account or privacy request, removed for safety or legal reasons, or lost because the service is changed or discontinued.

Retention periods for account, credit, billing, security, dispute, and fraud-prevention records vary according to their purpose and applicable legal requirements.

11. Security

QJORA AI uses reasonable technical and organizational safeguards intended to protect user information.

These safeguards may include:

• authenticated account access
• protected server-side operations
• access controls
• encrypted connections
• payment-provider security controls
• fraud-prevention measures

However, no website, database, storage system, or internet transmission can be guaranteed to be completely secure.

12. Passwords and Authentication

Authentication services may be provided through Supabase or another approved provider.

Users are responsible for keeping their passwords and login credentials secure.

QJORA AI may provide email confirmation and password-reset tools to help protect accounts.

13. Your Privacy Choices and Rights

Depending on where you live, you may have rights concerning your personal information.

These rights may include the ability to:

• request access to certain personal information
• request correction of inaccurate information
• request deletion of certain information
• object to or restrict certain processing
• request information about QJORA AI’s data practices

Some information may need to be retained for legal, fraud-prevention, accounting, billing, security, trial-abuse prevention, or dispute-resolution purposes.

QJORA AI currently handles deletion requests manually and does not offer an automatic self-service deletion tool. To request account or personal-data deletion, email support from the address associated with your QJORA AI account. QJORA AI may need to verify the request before deleting or de-identifying eligible account information and private gallery images.

QJORA AI does not promise automatic deletion or a fixed completion time. When a request is completed, certain records may remain where reasonably necessary or legally required.

To make a privacy request, contact:

support@qjoraai.com

14. California Privacy Rights

California residents may have additional rights under applicable California privacy laws.

Depending on eligibility and applicable law, these may include rights to:

• request information about personal information collected
• request deletion of certain personal information
• request correction of inaccurate personal information
• receive information about certain disclosures and data practices

QJORA AI will not discriminate against users for exercising applicable privacy rights.

15. Children’s Privacy

QJORA AI is intended for adults.

QJORA AI does not knowingly offer paid accounts or services to children under 18.

If you believe a minor has submitted personal information to QJORA AI, contact us at support@qjoraai.com so the matter can be reviewed.

16. International Users

QJORA AI may use service providers located in different countries.

Information may therefore be processed or stored outside your state, province, or country of residence where permitted by applicable law.

17. Third-Party Links and Services

QJORA AI may contain links to or integrations with third-party services.

Those third parties have their own privacy practices and policies.

QJORA AI is not responsible for the privacy practices of third-party websites or services that are not controlled by QJORA AI.

18. Changes to This Privacy Policy

QJORA AI may update this Privacy Policy as the service evolves.

When material changes are made, the effective date may be updated and additional notice may be provided where required.

Continued use of QJORA AI after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

19. Contact Us

For privacy questions or requests:

QJORA AI
Email: support@qjoraai.com