Privacy Policy

1. Who we are / Data controller

Comora.AI is a project operated by an individual. To contact the data controller, email hello@comora.ai.

2. What data we collect

• Registration data: email address, password hash
• Product images you upload
• AI-generated images
• Usage data (generation counts, credit usage)
• Basic profile data when you sign in with Google (email, name, profile picture)
• Payment-related data (processed by Stripe — we do not store full card numbers)

3. How we use your data

• To provide and improve our AI image generation services
• To manage your account and credits
• To process payments
• To send service-related emails (registration confirmation, password reset, etc.)
• To keep the platform secure and prevent abuse

4. Third-party services

• Supabase (database and authentication, data stored in the EU — Frankfurt)
• Resend (email delivery)
• fal.ai (AI image generation)
• Google (Google Sign-In)
• Vercel (website hosting and analytics)
• Stripe (payment processing)
• Each of these services has its own privacy policy.

5. Data storage location and retention

Your data is primarily stored in the European Union (Frankfurt). We retain your data for as long as your account is active. After account deletion, we remove your data within a reasonable period.

6. Your rights (GDPR)

You have the right to access, rectify, delete, and export your data, to restrict or object to processing, and to withdraw consent. To exercise these rights, contact hello@comora.ai.

7. Cookies

We use essential cookies to maintain your login session and anonymous Vercel Analytics to understand how the site is used.

8. Contact us

hello@comora.ai

9. Policy changes

We may update this policy from time to time. Material changes will be announced on this page.