Privacy Policy

Information we collect

We may collect account information such as your name, email address, authentication identifiers, profile information, subscription status, credit balances, support communications, and records needed to operate your account. When you create with Naleen, we process prompts, project information, generation settings, uploaded images, video, audio or files, and generated outputs.

We also process ordinary technical and security information such as browser or device information, request logs, timestamps, and diagnostic data needed to operate, secure, troubleshoot, and improve the service.

Google and Facebook sign-in

If you choose Google or Facebook sign-in, Naleen uses the authentication information the provider makes available for the permissions you approve, such as a provider account identifier, name, email address, and profile information. We use this information to authenticate you, create or connect your Naleen account, maintain your session, prevent abuse, and provide account support.

Naleen does not ask for your Google or Facebook password. We do not use Google user data for advertising, sell it, or use it for purposes unrelated to providing and securing your Naleen account. Our access, use, storage, and sharing of Google user data is limited to the practices described in this policy.

How we use information

We use information to provide authentication, projects, AI-assisted creation, generation history, asset storage, subscriptions, Naleen Credits, billing support, customer support, security, fraud prevention, service reliability, and product improvement. Prompts and customer content may be sent to the AI or media provider selected by Naleen to perform the requested generation or processing.

Service providers

Naleen relies on service providers to operate the product. These may include Supabase for authentication and application data, Stripe for payment processing, Cloudflare infrastructure for asset storage or delivery, and AI providers such as OpenAI and Runway for supported AI generation or processing. A provider receives only the information reasonably needed for the service it performs and handles that information under its own applicable terms and privacy commitments.

Payment card details are handled by Stripe's payment systems; Naleen does not need to store full payment card numbers in its application database.

Customer content and AI processing

You control what you submit to Naleen and should only upload or request content you are authorized to use. AI generation may require sending your prompt, reference assets, and generation settings to a third-party AI provider. Provider safety systems may review or reject requests. Generated content may be imperfect and should be reviewed before use.

Storage, security, and retention

We use reasonable technical and organizational safeguards designed to protect account and customer information. No online service can guarantee absolute security. We retain information for as long as reasonably necessary to provide the service, maintain legitimate business and security records, comply with legal obligations, resolve disputes, and enforce agreements. Different records may have different retention periods.

Deletion and your choices

You may stop using social sign-in, revoke provider access through the applicable provider, or request deletion of your Naleen account and associated personal data. See our Data Deletion page for instructions. Some information may be retained where reasonably necessary for legal, tax, fraud-prevention, security, dispute, or transaction-record obligations.

Children

Naleen is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as Naleen evolves. Material changes will be reflected by updating the policy and its effective date, and we may provide additional notice where appropriate.