Your account: email address, a hashed password, and whether the email is verified. Sign in with Google and we store the Google account id instead of a password. Your profile — display name, Slug, avatar — lives on your personal studio, not on the account record. What you make: projects, canvases, documents, timelines, uploaded assets, and generated output. Your prompts, and the model each request went to. Assistant conversations: what you say to the assistant and what it replies, plus the memory the system derives from them — a running summary of older turns, kept per project and per conversation so later ones start with context. How you use it: generation records with the model, provider, tokens and credits each one cost, kept so your credit balance can be audited against what you were charged. Standard server logs with IP address and browser user-agent, for security and debugging. Billing: handled by a payment processor. It holds your card details; we never see or store a card number. We keep the record of which pack or plan you bought and when.
To run the service — store your work, sync collaboration, route a generation to the provider behind the model you picked, and bill you correctly. To keep accounts secure and to investigate abuse. To email you about your account: the outcome of a refund you asked for, and material changes to these documents. The assistant writes memory on its own. Once a conversation grows too long to send in full, a language model summarises the older turns so the conversation carries its context forward. This runs before the reply, on the turn that grew too long. Ask us and we delete it. We do not sell your data. We do not use your content to train models — not ours, and we do not grant providers the right to train on it. If we ever want to use your content for anything beyond running the service, we will ask you first and it will be off by default.
Assets live with a cloud object-storage provider. Passwords are stored hashed, never in plain text. Traffic runs over TLS. Each upload carries a content hash computed in your browser; we store it with the asset and use it to recognise a file your studio already holds. No system is perfectly secure. If a breach affects your data we will tell you and the relevant regulator within the time the law requires. Report a vulnerability to security@breatic.ai.
You can see and edit your account data in the product, and export your work at any time — export is free on every tier, including the free one, and stays free if you stop paying. Ask us to correct anything wrong. Ask us to delete your account and its content. Ask for a copy of your data in a portable form. Object to a particular use, or withdraw a consent you gave. Write to contact@breatic.ai and we answer within 30 days. These are the rights the GDPR and comparable laws give people; we extend the same handling to everyone regardless of where they live, because running two standards is how one of them rots.
Your work is kept, not aged out. Downgrading lowers your storage limit. While you are over the limit you cannot upload anything new and you cannot generate anything new, because a generation writes bytes too; nothing already stored is deleted or locked, and credits you have already bought stay in your balance. An account with no login for 24 consecutive months is frozen rather than erased. Freezing suspends the product's features and never touches your data; export stays free throughout. Reactivating a frozen account carries a charge, and we will tell you what it is before you commit to it. Delete your account and we remove your content within 30 days, except what we must keep longer: billing records for the period tax law requires, and security logs for their retention window. We are a US company and your data is processed in the United States and wherever our providers operate. Transfers out of the EEA and the UK rely on the European Commission's standard contractual clauses.
We announce material changes in the product and by email before they take effect. The date at the top of this page is when it last changed. Privacy questions: contact@breatic.ai. Security reports: security@breatic.ai.