Privacy Policy

1. Introduction

Sirv AI Studio ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image processing services. For security disclosures, email security@sirv.studio.

2. Information We Collect

2.1 Information You Provide

• Account information (email address, name) when you sign up
• Images and files you upload for processing
• Payment information when purchasing credits
• Communications you send to us

2.2 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (features used, processing history)
• IP address and approximate location
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

• Provide and improve our AI image processing services
• Process your files with the third-party AI providers listed in section 5
• Manage your account and process payments
• Send service-related communications
• Analyze usage patterns to improve our services
• Detect and prevent fraud or abuse

4. Image Processing and Storage

• Uploaded images are temporarily processed through our AI providers
• Processed images may be cached temporarily to improve performance
• If you connect Sirv CDN, images are stored according to your Sirv account settings
• We do not use your images to train AI models

5. Third-Party Services

We use the following sub-processors:

• Hetzner - Application hosting, Redis, background jobs, workers, and backup copies of stored files (EU)
• PlanetScale - Main application database (EU)
• Cloudflare - File storage and delivery (R2) and bot checks on signup (Turnstile)
• fal.ai - AI image and video model inference
• OpenRouter - Routing of requests to AI text, image analysis and image generation models
• TypeSafe - AI image analysis for review checks, autofix, smart crop and AI Router decisions
• OpenAI - Speech transcription for video captions
• viddl.me - Audio extraction from videos for captions
• Quiver.ai - AI generation of SVG vector graphics from text prompts
• Stripe - Payment processing and subscription billing
• Amazon Web Services (SES) - Sending account and service emails
• PostHog - Product analytics (EU)
• Sentry - Error monitoring. Sentry processes error reports in the United States.
• Google / GitHub - OAuth authentication
• Sirv - Optional image delivery when you connect your own Sirv account. Also serves files created before October 2026 that are still stored on Sirv.

Each sub-processor has its own privacy policy governing the use of your information. We have a Data Processing Agreement (DPA) in place with each provider.

Read the standalone Data Processing Agreement page at /dpa.

6. Data Retention

Stripe keeps payment records for tax and accounting. We keep account and billing history in the app until you delete your account. Workspace assets stay available while the workspace exists. If you cancel a paid plan, the workspace moves to the Free plan and your assets stay. Items in the trash are permanently deleted after 30 days. Support conversations stay until you delete your account or the workspace. Contact form messages are deleted after 12 months. Anonymous analytics events are retained for up to 24 months.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit. Files in Cloudflare R2 are encrypted at rest. However, no method of transmission over the Internet is 100% secure.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent at any time

9. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how our services are used. When you first visit, a banner lets you accept or decline analytics cookies; until you choose, analytics stays anonymous per visit. You can change your choice any time under Product analytics in your account settings, and you can also control cookies through your browser settings.

Read the standalone Cookie Policy at /cookies.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@sirv.studio