Privacy Policy
Last updated: June 12, 2026
This Privacy Policy explains how StudioSprite ("we", "us", or "our") collects, uses, shares, and protects information when you use our website and services (the "Service"). By using the Service you agree to the practices described here.
1. Information We Collect
- Account data: email address, username, display name, authentication identifiers (including OAuth provider IDs), and password hashes (we never store plaintext passwords).
- User Content: prompts, uploaded reference images, generated sprites and animations, project metadata, notes, and any settings you configure.
- Billing data: subscription tier, credit balance, transaction history. Payment card details are handled by our payment processors and are not stored on our servers.
- Usage data: log data (IP address, user agent, route, timestamps), feature usage, error reports, and bug reports you submit.
- Cookies & local storage: required for authentication sessions and basic functionality; analytics cookies may be used as described below.
2. How We Use Information
- To operate, maintain, secure, and improve the Service.
- To generate, store, and deliver AI Output you request.
- To process payments, manage subscriptions, and enforce credit balances.
- To provide support, respond to bug reports, and communicate service-related notices.
- To detect, prevent, and address fraud, abuse, security incidents, and policy violations.
- To comply with legal obligations and enforce our Terms.
3. Legal Bases (EEA/UK)
If you are in the EEA or UK, we process your personal data under one or more of: performance of a contract (providing the Service), legitimate interests (security, product improvement), consent (where required, e.g., marketing), and legal obligation.
4. AI Processing & Third-Party Model Providers
Prompts, reference images, and related metadata are transmitted to third-party AI model providers (e.g., the Lovable AI Gateway and, if you use BYOK, providers you select) solely to generate Output. We do not sell your User Content or Output. Third-party providers process this data under their own terms and privacy policies; we encourage you to review them.
5. Sharing of Information
We share information only as needed:
- Service providers / sub-processors: hosting, database, storage, authentication, AI model providers, email, analytics, and payment processors, bound by confidentiality and data-protection obligations.
- Legal & safety: when required by law, subpoena, or to protect rights, property, or safety of StudioSprite, our users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality.
We do not sell personal information and do not share it for cross-context behavioral advertising.
6. Data Retention
We retain account data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. User Content and Output are retained until you delete them or close your account, after which they are deleted or anonymized within a commercially reasonable timeframe, subject to backup-retention cycles.
7. Security
We implement administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, row-level security on user data, and audit logging. No system is perfectly secure; you use the Service at your own risk and are responsible for safeguarding your account credentials.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can exercise most rights from your account settings or by contacting privacy@studiosprite.app. We will respond within the timeframes required by applicable law.
California residents (CCPA/CPRA): you have additional rights including the right to know, delete, correct, and opt out of "sales" or "sharing" (we do not sell or share for cross-context behavioral advertising).
9. International Data Transfers
We and our sub-processors may process data in countries other than your own, including the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
10. Children
The Service is not directed to children under 13 (or the minimum digital-consent age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
11. Cookies & Tracking
We use strictly necessary cookies and local storage for authentication and core functionality. We may use limited first-party analytics to understand aggregate usage. You can control cookies via your browser settings; disabling them may impair Service functionality.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email. The "Last updated" date above reflects the most recent revision.
13. Contact
For privacy questions, requests, or complaints, contact us at privacy@studiosprite.app. EEA/UK users have the right to lodge a complaint with their local supervisory authority.