Last updated: 2026-09-23
Privacy Policy
Personal data handling, secure storage, and privacy rights.
1. Information We Collect
We collect only information reasonably necessary to operate the service:
- Account Data: Email address, user ID, and session tokens managed via Supabase Auth.
- Assets & Files: Images, thumbnails, and metadata stored in Cloudflare R2 with private authenticated access and presigned URLs where applicable.
- Agency Credentials: Stock agency contributor credentials, stored with encryption at rest.
- Safety Logs: Moderation decisions and timestamps to prevent platform abuse.
- Billing Data: Managed securely by our Merchant of Record (Microstock Studio never stores full card numbers).
- Usage Metrics & Analytics (Optional): With your prior consent, we use Google Analytics 4 to analyze traffic, engagement, and improve the service. Analytical storage is strictly optional and may be rejected at any time, retaining only storage necessary for platform operation. We never transmit personally identifiable information (PII), email addresses, user or project IDs, prompts, or private media content to Analytics.
2. Third-Party AI and Service Providers
To provide generative and vision capabilities, necessary data is processed by trusted partners such as Google (Gemini models) and Leonardo AI, subject to their applicable commercial terms and privacy practices.
For aggregate traffic analysis and service improvement, we optionally use Google Analytics 4 subject to your prior consent for analytics storage, with advertising features and cross-site profiling permanently disabled.
3. Security Measures and Retention
We implement reasonable technical safeguards: HTTPS/TLS encryption in transit, database Row Level Security (RLS), authenticated server-side access with short-lived presigned URLs where applicable, and credential encryption at rest. Data is retained for as long as your account is active or needed for security and legal compliance.
4. User Privacy Rights and Children
Depending on your jurisdiction, you may have rights of access, correction, deletion, or portability. To exercise these rights, email hola@microstock.studio.
Microstock Studio is not directed to individuals under 18 and does not knowingly collect personal data from minors.