Privacy Policy

1. Who We Are

Dafty is an image generation platform operated from the United Kingdom. This policy explains how we collect, use, and protect your personal data when you use our service.

2. Data We Collect

We collect the minimum data necessary to provide the Service:

• Email address — used for account creation, authentication, and essential service communications (e.g. billing confirmations, security alerts)
• Name — used to personalise your account
• Usage data — generation counts and plan usage to manage billing and service limits
• Payment information — processed securely by our third-party payment provider; we do not store card details

That is all we collect. We keep it simple.

3. How We Use Your Data

Your data is used solely to:

• Provide and maintain your account
• Process billing and manage your subscription
• Send essential service communications (account security, billing issues, material service changes)
• Enforce our Terms of Service

4. What We Do Not Do

To be clear:

• We do not send marketing emails
• We do not sell, rent, or share your personal data with third parties for their marketing purposes
• We do not use your personal data for advertising or profiling
• We do not use your generated images to train AI models

5. Third-Party Services

To provide image generation, we send your sketch data and prompts to third-party AI model providers. These providers process data in accordance with their own privacy policies. We select providers that meet reasonable data handling standards, but we are not responsible for their practices.

Payment processing is handled by a third-party payment provider. Your payment details are processed directly by them and are not stored on our systems.

6. Data Storage and Security

Your data is stored securely using industry-standard encryption and access controls. We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Under applicable data protection law (including UK GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data

To exercise any of these rights, contact us via the details below. We will respond within 30 days.

8. Cookies

We use essential cookies only — those required for authentication and core functionality. We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Children

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the email address on your account. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, you can reach us at @daftyai on X.