Privacy Policy

To provide the Service we collect:

• Email address, display name, and profile image.
• Identifiers provided by OAuth providers (Google / Discord) such as sub / providerID.
• Payment information processed via Stripe (we do not store card numbers).
• IP address and user-agent at signup.
• Prompts, uploaded files, and generated outputs.
• In-service activity logs (generation history, credit usage, billing).

• Operating and providing the Service.
• Account authentication and management.
• Billing and payment processing.
• Fraud, abuse, and multi-account detection.
• Quality improvement and new-feature development.
• Responding to inquiries.
• Complying with legally required disclosures.

We do not share personal information with third parties except:

• When required by law.
• When necessary to protect the life, body, or property of any person.
• In connection with a business transfer.

We use the following providers to operate the Service:

• Supabase Inc. (US): authentication, database, file storage.
• Vercel Inc. (US): web application hosting.
• Replicate, Inc. (US): AI generation (transmission of prompts and uploaded files).
• Stripe, Inc. (US): payment processing.
• Google LLC / Discord Inc.: social-login providers.

We require comparable or higher security standards from these providers.

Operating the Service involves transferring and storing personal data in the United States and other countries, in compliance with applicable law.

• Account information: during use and up to 30 days after termination.
• Generated content: until you delete it, or upon account deletion.
• Prompt history and activity logs: automatically deleted after 90 days.
• Audit log: up to 180 days for abuse detection and legal compliance.
• Billing records: 7 years (statutory requirement).

You may request the following with respect to your personal information:

• Disclosure.
• Correction, addition, or deletion.
• Suspension of use or erasure.
• Suspension of third-party transfers.

Send requests to the contact below. We will verify your identity and respond within a reasonable time.

We use cookies and similar technologies to maintain authentication sessions, remember UI preferences, and detect abuse. Disabling cookies may limit access to some features.

• All traffic is encrypted with HTTPS.
• Passwords are stored as one-way hashes.
• Payment data is processed on Stripe's PCI-DSS compliant infrastructure; we do not store card data.
• We employ unauthorized-access detection, IP-based rate limits, and email-alias normalization.

The Service is not intended for users under 13. If we learn we have collected information from a child under 13, we will promptly delete it.

We may update this Privacy Policy as needed. Updated terms take effect when posted on the website.

STOP Inc.
7F SENQ Roppongi, Shin-Roppongi Bldg., 7-15-7 Roppongi, Minato-ku, Tokyo 106-0032, Japan
CEO: Hironobu Fujikata
Email: info@stop.co.jp