Privacy Policy
Last updated: 7 May 2026
This policy explains what data MangaFlow collects, how we use it, who we share it with, and the rights you have over it.
1. Data we collect
- Account data — your email address, display name, profile photo, and authentication identifiers, provided by Clerk when you sign in (typically via Google OAuth).
- Project data — the stories you submit, settings you choose (genre, art style, page count), generated prompts, and image URLs.
- Generated images — manga pages, character references, and covers produced from your inputs. Stored on Cloudinary CDN.
- Usage and credits — balance, ledger of generations, and timestamps.
- Logs and diagnostics — request logs from our hosting provider used to debug errors and monitor abuse. Includes IP addresses for rate-limiting.
2. How we use it
- To run the Service: process stories into manga, store and display your projects.
- To enforce credit limits and prevent abuse.
- To send transactional emails (welcome message, generation status, account changes).
- To respond to support requests.
- To detect and prevent fraud, harmful content, and Terms violations.
3. Service providers
To run MangaFlow we use industry-standard cloud infrastructure providers for authentication, database storage, AI image generation, content delivery, transactional email, and application hosting. The stories you submit are sent to AI providers for the sole purpose of generating the manga you requested.
We do not sell your personal data. We do not use your projects or generated images to train AI models. If you need a current list of sub-processors for compliance purposes, contact us via our contact form.
4. Data retention
Project data and images are retained until you delete the project or close your account. When you request account closure, we erase your Firestore documents and Cloudinary assets within a reasonable period (typically minutes, but cleanup may take up to 30 days for replicas and backups).
Aggregated, anonymised analytics may be retained indefinitely.
5. Your rights
Depending on your jurisdiction (e.g. GDPR in the EU/UK, CCPA in California), you have the right to:
- Access — download a copy of your data via Account → Data export.
- Erasure — close your account and erase all associated data by emailing support@mangaflow.studio from your registered address.
- Correction — update your display name and email through your Clerk profile.
- Object/restrict — use our contact form.
6. Cookies
We use essential cookies set by Clerk for authentication. We do not currently use marketing or analytics cookies that track you across sites.
7. Security
Data in transit is encrypted with TLS. Database access is restricted to our servers with scoped service-account credentials. We do not have direct access to your Google account.
8. Children
MangaFlow is not directed to children under 13 (or the digital-consent age in your country). If we learn we have collected data from a child without verified parental consent, we will delete it.
9. International transfers
Our sub-processors operate in multiple regions, including the United States and the European Union. By using the Service you consent to these transfers.
10. Changes
We will post material changes to this policy here and notify you by email when feasible.
11. Contact
Privacy questions: use our contact form.