Privacy Policy

• Account info: name, email, profile photo (via Google OAuth, through Supabase)
• Images you upload for editing/composition
• Usage data: generation history, token balance, timestamps
• Payment info: handled entirely by Paddle (our Merchant of Record) — we do not store your card details

• To provide the image generation service you request
• To process payments (via Paddle)
• To maintain your account and token balance
• To improve service reliability (aggregated, non-identifying usage patterns)

Uploaded images are sent to third-party AI providers (including fal.ai) solely to generate your requested output. We do not use your uploaded images to train AI models. Images may be temporarily cached during processing and are not retained longer than necessary to deliver your result.

We share data only with:

• Supabase (authentication and database hosting, Singapore region)
• fal.ai (AI image processing)
• Paddle (payment processing)

We do not sell your personal data to third parties.

Account data is retained while your account is active. You may request account deletion at any time by contacting support@composia.art.

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact support@composia.art to exercise these rights.

We use industry-standard security practices, including encrypted connections and access-controlled databases, to protect your data.

Composia is not intended for users under 18. We do not knowingly collect data from minors.

We may update this Privacy Policy. Material changes will be communicated via the website.

Questions about this Privacy Policy: support@composia.art