1. Information we collect
- Account information, including your name, email, profile image, authentication identifiers, workspace membership, locale, and region.
- Project content, including prompts, uploads, reference media, generated outputs, notes, project structure, and asset metadata.
- Generation and traceability records, including the model, settings, input references, provider route and task identifiers, job status, timestamps, and related credit entries.
- Payment records, including Stripe customer, checkout, invoice, and payment status identifiers. Soho Frame does not receive or store your full card number.
- Technical and usage information, including IP address, browser, session, cookie, security, request, error, and performance data available to our infrastructure.
- Support communications and the information you choose to include in a request or report.
2. How we use information
We use information to authenticate users; operate workspaces; route, track, store, and deliver generation jobs; calculate and settle credits; process payments; provide support; secure the service; detect fraud and policy abuse; comply with law; and improve product reliability.
We may use aggregate or de-identified information for analytics and product planning when it can no longer reasonably identify you.
3. When information is shared
We share only what is reasonably necessary with vendors that provide identity, payments, hosting, storage, monitoring, communications, generation routing, and AI model services. A selected generation provider receives the prompt, inputs, and configuration needed to perform that job.
Providers process information under their own terms and retention practices. We may also disclose information to comply with law, respond to valid legal process, investigate abuse, protect people or the service, or complete a corporate transaction subject to appropriate safeguards.
4. Retention and deletion
We keep account, project, generation, payment, and security records while needed to provide the service and for legitimate business, fraud prevention, financial, dispute, and legal purposes. Retention periods vary by record type and provider.
Deleting a project or account may not immediately remove data from backups, financial records, security logs, or provider systems. We may retain limited records when required by law or needed to establish, exercise, or defend legal claims.
5. Security and international processing
We use technical and organizational safeguards intended to protect customer information. No online service can guarantee absolute security. Use a strong, unique sign-in method and contact us if you suspect unauthorized access.
Soho Frame and its providers may process information in countries other than your own. Privacy protections may differ, and we use available contractual or legal safeguards where required.
6. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing.
Submit a privacy request through Support or email support@sohoframe.com. We may need to verify your identity and may retain records where an exception applies.
7. Children
Soho Frame is not directed to children and may be used only by people who are at least 18. Do not submit personal data or sexualized content involving anyone under 18. See our Content Policy.
8. Changes and contact
We may update this policy as the product, providers, or law changes. The effective date above identifies the current version. Privacy questions may be sent to support@sohoframe.com.