Privacy Policy

1. Information We Collect

1a. Use of Your Content for AI Model Training

Zopia does not use the content you upload, create, or generate (images, videos, prompts) to train our own AI models. Some generation features are powered by third-party AI model providers; your input and output are sent to that provider to produce your requested result, and depending on that provider's own terms of service, they may retain or use this data, including for their own model training. We have not individually audited every provider's data-use terms, these terms can differ by provider and change over time, and we do not currently offer a way to opt out of this third-party processing. Your generated content is stored so you can access your own history, and remains private and visible only to you unless you choose to make it public — for example by sharing it or submitting it to be featured.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our AI design services
• Process payments and manage your account
• Send important service updates and notifications
• Provide customer support
• Analyze usage patterns to improve our platform
• Ensure security and prevent fraud

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these limited circumstances:

• Service Providers: Trusted third parties who help us operate our service (payment processors, hosting providers, AI model providers, analytics services) — see the sub-processor list below
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

3a. Sub-processors

We share the minimum data necessary with the following categories of service providers so they can perform services on our behalf. This list may change as our product evolves; contact us for the current, itemized list.

• Cloud hosting & storage: Amazon Web Services (AWS) — hosts our application, databases, and stored media
• Payments: Stripe — processes payments and subscriptions; we never see or store your full card number
• AI generation providers: the specific model provider(s) behind whichever generation tool you use (for example OpenAI, Kling AI, PixVerse, MiniMax/Hailuo, ByteDance Volcano Engine, Google, and other model partners) — receive only the prompt/media needed to produce your requested output
• Analytics & product improvement: Google Analytics, Amplitude, and PostHog — only loaded after you accept optional cookies (see Section 6)
• Error monitoring: Sentry — used to detect and fix bugs; does not receive your generated content

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure data centers and infrastructure

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access & Portability: Download a copy of your account data (profile, credit balances, transactions, subscription, and projects) as JSON or CSV any time from Account → Privacy & Data — no support ticket needed
• Correction: Update your name, avatar, or profile information directly in Account settings
• Deletion: Permanently delete your account and personal information from Account → Privacy & Data, or by contacting us
• Opt-out of cookies: Decline optional analytics cookies from the cookie banner shown on your first visit, or clear your browser storage to be asked again
• Opt-out of marketing: Unsubscribe from marketing emails using the link in any marketing message

For anything not covered by the self-service tools above, contact us at privacy@jaaz.app

5a. Additional Notice for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the CPRA:

• We have not sold or shared (as "sale"/"share" are defined under CCPA) your personal information for cross-context behavioral advertising in the preceding 12 months
• You have the right to know what personal information we collect, use, and disclose, the right to correct it, and the right to request deletion — use the tools in Section 5 above or contact us
• You have the right to non-discrimination for exercising any of these rights
• We do not use or disclose sensitive personal information for purposes beyond what CCPA permits without additional consent

6. Cookies and Tracking

Essential cookies (for login sessions, security, and core functionality) are always on and cannot be disabled, as the service will not work without them. Optional analytics cookies (Google Analytics, Amplitude, PostHog) are only set after you accept them in the cookie banner shown on your first visit; if you decline, none of these are loaded. You can change your choice at any time by clearing your browser's local storage for this site, which will show the banner again.

7. Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill legal obligations. Account information is retained until you delete your account, after which it is deleted within 30 days.

8. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service. Your continued use of our service after changes constitutes acceptance of the updated policy.