Privacy Policy

1. Information We Collect

1.1 Information You Provide

1.2 Automatically Collected Information

1.3 Sensitive Information and Collection Limits

We do not request health records, government identification numbers, or precise device location for ordinary use. Submitted photos and conversations may nevertheless contain sensitive information. We process this content for requested features and do not build faceprints or use photos for biometric identification.

2. How We Use Your Information

2.1 Service Delivery

To manage accounts, process AI requests, store your content, handle subscriptions and credits, and send service communications.

2.2 Personalization

To apply your selected traits and preferences, remember settings, and display favorites, pinned content, and suggested prompts.

2.3 Security and Fraud Prevention

To detect fraud, abuse, and unauthorized access, enforce our Terms, and protect users and the Service.

2.4 Service Improvement

We use anonymous operational statistics to improve features, performance, and reliability. They must not identify you or reproduce private photos, prompts, or conversations. Separate research or evaluation using private content requires your permission. Extension information remains subject to Section 2.5.

2.5 Browser Extension Limited Use

Information received through the Soulmine browser extension, including selected images and any aggregated, anonymized, de-identified, or derived data based on them, is used only to provide or improve the extension's single purpose of transferring a user-selected image into Soulmine Recreator, complete a generation you request, maintain security and reliability, or comply with law. We do not use extension data for advertising, marketing, unrelated products, general business intelligence, creditworthiness, or lending. Human access is limited to cases where you give explicit consent, access is necessary for security or abuse investigation, law requires it, or the data is aggregated and used only for internal operations directly related to the extension's single purpose. Our use of information received through Soulmine Recreate adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

2.6 Legal Compliance

To meet tax and recordkeeping obligations, respond to lawful requests, enforce agreements, and handle legal claims.

3. How We Share Your Information

3.1 Service Providers

We share information as needed with AI, payment, hosting and storage, support, analytics, security, and professional-advisory providers. They receive data relevant to their role under appropriate confidentiality and data-protection terms. Support tools may receive your name, email, subscription status, credit balance, and conversations. Payment providers also process billing information under their own legal obligations. Contact us for further recipient details.

3.2 Legal Disclosures

We may disclose information where reasonably necessary to comply with law or legal process, enforce agreements, investigate fraud or security issues, prevent harm, or protect legal rights. We may notify you of legal requests unless prohibited by law or notification could compromise an investigation or legitimate interests.

3.3 Business Transfers

Information may transfer with a merger, acquisition, reorganization, or sale under appropriate safeguards. A successor must respect this policy; new uses require a valid legal basis and consent where required. We notify you of a change of controller where required and before materially different uses. Extension information and derived data transfer only with your prior explicit consent.

4. Data Security

4.1 Security Measures

We use access controls, encryption, and secure password storage to protect personal information.

4.2 Security Limitations

No security measure guarantees absolute protection. Keep your account credentials private and use a strong password.

4.3 Breach Notification

We notify affected users of personal-data breaches without undue delay where required by law, explaining the breach and recommended protective steps.

5. Your Privacy Rights

5.1 Access and Portability

Subject to applicable law, you may: (i) request access to personal information we hold about you; and (ii) request an export of certain data. To make either request, contact us at [email protected]. We reserve the right to limit the scope, format, and frequency of data access requests and to charge a reasonable fee for manifestly unfounded, excessive, or repetitive requests.

5.2 Correction

You have the right to update or correct inaccurate personal information through your account settings or by contacting us at [email protected].

5.3 Deletion

Request deletion of your account and associated personal information by emailing [email protected] from your account email. We verify requests and explain applicable retention exceptions under Section 10. To stop subscription renewal immediately, also cancel through the billing portal.

5.4 Objection and Restriction

You have the right to: (i) unsubscribe from marketing emails; and (ii) object to or request restriction of certain processing activities where applicable by contacting us at [email protected].

5.5 Exercising Your Rights

Contact [email protected] to exercise your rights. We verify identity as needed and respond within applicable legal timeframes. If an extension is permitted and needed, we explain the reason and expected response date. Requests may be limited or refused where law allows, including to protect others’ rights or address manifestly unfounded or excessive requests.

6. International Data Transfers

6.1 Data Location

Our primary servers are located in the United States. Data may be transferred to and processed in the United States, European Union, or other jurisdictions.

6.2 Transfer Safeguards

For transfers from the European Economic Area or United Kingdom to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards to ensure GDPR compliance.

7. Cookies and Tracking Technologies

7.1 Essential Cookies

Cookies and browser storage support sign-in, security, and selected preferences. Some sign-in cookies persist between visits. Limiting this storage can affect those features.

7.2 Analytics

We use analytics tools to understand service usage and improve functionality. These tools may track activity on a per-account basis for service delivery purposes.

7.3 Support Chat

Support chat is provided by a third-party support provider. It loads only when you open support chat, never automatically on page load. Once opened, it uses cookies and browser storage to remember your conversation and prevent abuse. If you are signed in, relevant account information is sent as described in Section 3.1. Signing out ends the chat session on this device. Email support at [email protected] works without chat. Contact support to request deletion of past support messages.

7.4 Other Service Cookies

Support, security, and payment providers may use cookies to deliver their services. We do not use advertising cookies.

8. Children's Privacy

8.1 Age Restrictions

The Service is intended only for users 18 years of age or older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18.

8.2 Deletion of Minors' Data

If we discover we have collected information from anyone under 18, we will delete such information promptly and terminate the account.

8.3 Parental Requests

Parents or guardians who believe their child has used the Service may contact us at [email protected] to request access to or deletion of their child's information.

9. California Privacy Disclosures

9.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information: (i) identifiers (email, account information); (ii) commercial information (subscription tier, transaction history); (iii) internet activity (aggregated usage metrics); (iv) visual information (user-generated images); and (v) inferences (AI traits, preferences).

9.2 Sensitive Personal Information

We use account credentials for authentication. Content you submit may contain sensitive personal information, even though we do not request that information for ordinary use. We do not extract faceprints or use uploaded photos for biometric identification. We use submitted content to provide the requested features, maintain security, and comply with law, rather than to build sensitive advertising profiles.

9.3 Sale and Sharing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

10. Data Retention

We retain account data and saved content to operate your account; support records for support and follow-up; billing records for accounting, tax, and disputes; and security records to investigate issues and prevent abuse. Retention depends on the purpose, legal requirements, and provider settings.

After deletion, limited records may remain for billing obligations, legal claims, security, or backup recovery. We explain applicable exceptions when handling erasure requests. Backup copies remain until their scheduled expiration. Truly anonymous operational statistics may be retained while useful.

Temporary extension photos on your device become inaccessible after one hour and are deleted then, or when Chrome next runs. Successful import deletes them sooner. Extension information remains subject to Section 2.5.

11. GDPR Compliance (European Users)

11.1 Controller

Gestalt Labs LLC is the data controller for purposes of the General Data Protection Regulation (GDPR).

11.2 Legal Bases for Processing

11.3 Supervisory Authority

You have the right to lodge a complaint with your data protection authority. For EU/EEA residents, contact information is available at: https://edpb.europa.eu/about-edpb/board/members_en. For UK residents: https://ico.org.uk/make-a-complaint/

12. Changes to This Privacy Policy

12.1 Updates

We reserve the right to modify this Privacy Policy at any time at our sole discretion. We will make reasonable efforts to communicate material changes via email, in-app notification, or by posting the updated policy on the Service at least seven (7) days prior to the effective date. Non-material changes may be made at any time without notice.

13. Contact Information