Privacy Policy

This Privacy Policy applies to Gasimus websites, applications, generation tools, account and billing features, support channels, and other services that link to this policy (collectively, the "Service").

It does not govern third-party websites or services that you access independently, even when they are linked from Gasimus.

We may collect the following categories of information:

• Account information: name, email address, profile image, username, profile details, password hash for password-based sign-in, authentication provider details, and account status.
• Creative content: prompts, instructions, uploaded images or files, reference media, Creative Agent conversations, project settings, generated images and videos, and related metadata.
• Generation and usage information: models selected, generation settings, job status, timestamps, credit consumption, error information, and feature interactions.
• Billing information: plan, billing cycle, billing contact details, transaction and invoice references, payment status, currency, and payment processor responses. Gasimus does not intentionally store complete payment card or bank credentials.
• Technical information: IP address, browser and device type, operating system, referring pages, request logs, session identifiers, approximate location derived from IP, and security or diagnostic events.
• Communications: support requests, feedback, emails, and other messages you send to us.

We collect information:

• directly from you when you create an account, upload content, generate media, make a purchase, or contact us;
• automatically when you use the Service, including through logs, cookies, sessions, and similar technologies;
• from sign-in providers such as Google when you choose third-party authentication; and
• from service providers such as payment processors when they confirm or update a transaction.

We use information to:

• create, authenticate, maintain, and secure accounts;
• process prompts, uploads, and reference media to provide requested image and video outputs;
• operate Creative Agent conversations, projects, generation history, and media storage;
• calculate credit usage, activate plans, process payments, and issue invoices;
• send transactional messages, security notices, service updates, and support replies;
• detect fraud, prohibited content, abuse, account compromise, and technical failures;
• debug, analyze, and improve reliability, model routing, features, and user experience; and
• comply with law and enforce our Terms and Conditions.

Gasimus uses third-party AI providers to fulfill generation requests. Prompts, instructions, uploaded reference media, and relevant settings may be sent to providers such as OpenAI, fal.ai, Together AI, or other model providers selected for the requested workflow.

Those providers process the information needed to return an output and may keep limited records under their own terms, privacy notices, and our arrangements with them. Provider practices can differ by model and may change over time. Do not submit secrets, regulated information, or sensitive personal data unless you have a lawful basis and the selected workflow is appropriate for that data.

Gasimus does not currently train its own foundation models on private prompts, uploads, or generated outputs. If this practice changes, we will update this policy and provide any notice or choice required by applicable law.

We may share information with:

• AI model and inference providers that process generation requests;
• cloud hosting, database, storage, and content delivery providers, including services such as Cloudflare R2;
• authentication and account providers, including Google when you use Google sign-in;
• payment processors such as Polar, Mayar, or Midtrans;
• email delivery, monitoring, fraud prevention, security, and customer support providers, including services such as Resend;
• professional advisers and authorities when reasonably necessary to comply with law or protect rights and safety; and
• a buyer, successor, or relevant adviser in connection with a merger, financing, reorganization, or sale of all or part of our business.

Gasimus does not sell personal information for money. We may disclose aggregated or de-identified information that does not reasonably identify you.

Projects and account content are intended to remain associated with your account unless you download, publish, or share them. Generated files and reference media may be delivered through cloud storage or content delivery URLs. Anyone who receives a shareable or accessible URL may be able to view the associated media, so share links carefully.

You are responsible for avoiding uploads or sharing that reveal personal, confidential, or regulated information without appropriate permission.

We use cookies, session tokens, and local storage where needed for sign-in, security, preferences, billing flow continuity, and Service performance. You can control cookies through your browser, but blocking essential cookies may prevent authentication or other features from working correctly.

Where applicable law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests such as operating and securing the Service, comply with legal obligations, and rely on consent where required. You may withdraw consent at any time, but withdrawal does not affect processing already completed lawfully.

We retain information for as long as reasonably necessary to provide the Service, maintain generation history, secure accounts, resolve disputes, enforce agreements, and meet legal, tax, accounting, and fraud-prevention obligations. Retention periods vary by data type and operational need.

Deleting your account disables access but may not immediately erase every record or file. Backups, security logs, billing records, provider records, and data required by law may remain for a limited period. De-identified information may be retained where it can no longer reasonably be linked to you.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online service, transmission method, or storage system is completely secure, and we cannot guarantee absolute security.

You can update certain account details or request account deletion in account settings. You may also contact us to request access, correction, deletion, restriction, objection, or portability of personal data where those rights apply.

We may need to verify your identity before fulfilling a request. Some information may be retained where permitted or required for security, billing, legal compliance, or the rights of others.

Gasimus and its providers may process information in Indonesia, the United States, and other countries where they operate. Those countries may have different data protection laws. Where required, we use appropriate safeguards for international transfers.

Gasimus is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to Gasimus, contact us so we can investigate and take appropriate action.

We may update this Privacy Policy as the Service, providers, or legal requirements change. We will post the revised policy here and update the date above. For material changes, we may provide an additional notice where appropriate.

Questions and privacy requests can be sent to [email protected]. You can also review our Terms and Conditions.