zpic

Privacy Policy

Last updated

Privacy Policy

LAST UPDATED: NOVEMBER 2026

OPERATED BY: zPic LLC

zPic LLC ("zPic", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, process, use, store, and protect your information when you access our generative AI platform.

1. Information We Collect

  1. Account Information: When you register, we collect your email address, username, encrypted password, and account preferences.
  2. User Input Data: Text prompts, negative prompts, uploaded media (photos, video clips, reference audio), generation configurations, and customer support messages.
  3. Generated Data: Synthetic images, videos, logs of generation requests, timestamps, model checkpoints used, and credit consumption history.
  4. Billing Data: We do not store or process raw credit card numbers or banking data on our servers. All payment card processing is securely handled by our PCI-DSS compliant payment provider.
  5. Technical & Telemetry Data: IP addresses, browser fingerprint/user agent, device characteristics, operating system, and session timestamps.

2. How We Use Your Information

We process your personal information for the following specific purposes:

  • Service Delivery: To operate our generative machine learning models and render your requested media.
  • Safety & Content Moderation: To scan User Inputs and Outputs against prohibited content databases, detect CSAM, and prevent unauthorized non-consensual likeness generation.
  • Billing Management: To authenticate purchases, monitor subscription lifecycles, mitigate chargebacks, and prevent payment fraud.
  • Legal & Regulatory Compliance: To maintain records required by payment processors, comply with law enforcement requests, and enforce our Terms of Use.

3. Model Training & Data Retention

  • Zero Training on Private User Uploads: Unless you explicitly opt in to custom community model fine-tuning, zPic does not use your private uploaded images, personal audio samples, or private generated adult outputs to train public foundational AI models.
  • Retention Schedule:
    • Uploaded Media (Inputs): User uploaded reference media is stored in your account library until you choose to delete them, or after 90 days of account inactivity.
    • Generated Assets (Outputs): Outputs remain accessible in your account library until you choose to delete them, or after 90 days of account inactivity.
    • Audit & Moderation Logs: Hashes of blocked prompts, violation logs, and transaction timestamps are retained for security and fraud defense for up to 2 years.
    • Welcome Credit Records: When an account receives its free welcome credits, we keep a one-way keyed hash of its email address, with no other account data, to stop the same address from claiming the welcome credits again. This record is kept after the account is deleted.
  • Biometric Information: Media you upload or generate may contain biometric information such as facial features. How we collect, use, retain, and destroy it, including the written retention and destruction schedule required by the Illinois Biometric Information Privacy Act, is set out in our Biometric Information Privacy Policy.

4. Third-Party Sharing & Disclosure

We do not sell, rent, or trade your personal information. We share information only with:

  1. Payment Processors: For payment authentication, billing support, and chargeback resolution.
  2. Cloud & Compute Infrastructure: Secure cloud GPU providers who process render tasks under strict data processing agreements.
  3. Law Enforcement / Child Protection: Where legally required or where illegal material (such as CSAM) is identified, data is reported directly to NCMEC and appropriate law enforcement agencies.

5. Cookies & Tracking

We utilize strictly necessary cookies for session authentication, load balancing, and remembering age-gate verification confirmations. We also use Google Analytics, which sets its own cookies, to measure overall traffic and understand how visitors arrive at and use the Service. This data is aggregated and is not used to identify you. You can opt out with the Google Analytics opt-out browser add-on. We do not run third-party behavioral advertising trackers.

6. Your Data Rights (GDPR / CCPA / International)

Depending on your jurisdiction, you possess the following rights regarding your data:

  • Right to Access / Portability: Request a copy of your personal data held by zPic.
  • Right to Deletion: Request the permanent deletion of your account, prompts, uploaded media, and generated outputs.
  • Right to Correct: Amend inaccurate personal information.
    To exercise your privacy rights, email privacy@zpic.com. We will respond within thirty (30) days.

7. Security Measures

We deploy strict technical safeguards including SSL/TLS 1.3 in-transit encryption, AES-256 data-at-rest encryption, automated role-based access restrictions, and vulnerability testing to protect your account against unauthorized access.

8. Contact Information & Data Protection Officer

  • Data Controller: zPic LLC
  • Privacy Officer Email: privacy@zpic.com