Privacy Policy

1. Google and GitHub sign-in

When you choose Sign in with Google, PhotoMux requests the openid, email and profile permissions. We receive your Google account identifier, verified email address, name and profile picture URL. We use these details to create and identify your PhotoMux account, sign you in, display your profile and associate your work with your account. Your account name and email are also used for support and billing when you use those services.

Google sign-in does not give PhotoMux access to your Gmail messages, Google Drive files, Calendar or contacts. We do not receive your Google password. Google profile information is not used as image or video generation prompts or as training data for AI models.

With GitHub sign-in, we receive your GitHub identifier, name, profile picture URL and verified primary email address for the same account purposes. PhotoMux does not request access to your repositories for sign-in.

2. Content and other information we handle

PhotoMux processes information you provide and information needed to operate the service:

• Your text prompts, uploaded reference images and videos, generated results, canvas connections, chats, folders, projects and preferences.
• Team memberships, invitations and content you choose to share with other people.
• Account and session identifiers, credit usage, purchase and subscription information. Payment details are handled by payment providers rather than entered into PhotoMux's own payment form.
• Messages and information you provide when requesting support.
• Technical information such as IP addresses, browser and device information, request details and error diagnostics.

3. How we use information

We use information to sign you in, provide generation and editing tools, save and organize your work, enable the sharing features you use, manage credits and subscriptions, respond to support requests, diagnose errors, protect accounts and operate and improve the service. Your prompts and selected media are processed to produce the results you request.

4. Service providers and sharing

PhotoMux uses service providers to run the product. Information is shared as needed for the functions described below. These providers may process information in countries other than your own.

Content in a team workspace is accessible to that team's members. Sharing a project or connecting an external app makes the content covered by that sharing choice or permission available to its recipients. Share only content you intend those recipients to access. We may also disclose information when required by law or to investigate abuse and protect the service.

• Google and GitHub handle the sign-in you choose. PhotoMux stores the account details described above in its application database.
• Cloudflare provides website and API hosting and R2 media storage. Our database and background processing infrastructure handle account records, projects and processing jobs.
• Runware and the model providers used for a requested operation process prompts, selected reference media and generation settings. Uploaded media may be made available through temporary URLs so a provider can process it.
• Autumn manages credits and subscriptions and receives account identifiers, name, email and usage or billing information. Payment processing is handled through the checkout and payment providers used for a purchase.
• Sentry receives error diagnostics, which can include technical request and device information and IP addresses. Google Analytics is used in the app when configured and can collect website activity, device information and cookie identifiers. The landing page also loads fonts from Google Fonts.

5. Storage, sessions and security

PhotoMux stores account and project records in a database and uploaded and generated media in cloud object storage. The app uses browser storage for its PhotoMux sign-in session, cached application data and preferences, and uses an authentication cookie for protected image access. Clearing browser storage or cookies may sign you out or reset preferences.

Public PhotoMux services use HTTPS. Account and workspace access controls restrict access to application records and media. These protections do not make the service end-to-end encrypted: PhotoMux and its processing providers must process the content you submit to provide the service. No online service can guarantee absolute security.

You can manage cookies and site storage through your browser and use browser controls to limit analytics requests. Analytics settings are separate from Google sign-in permissions.

6. Retention and deletion

Account information and saved work are retained while needed to provide your account and the features you use, unless you delete them or request deletion. We do not apply a fixed two-year expiry to saved chats.

You can delete personal work in the app. To close your account, open your account settings and choose Delete account. Account deletion removes sign-in links, sessions and the account record, and queues background cleanup of personal chats, media and folders. Cleanup is asynchronous rather than instantaneous. Work in a team remains with that team, and media still used by surviving shared work may be retained. If you are a team's only owner and other members remain, you must transfer ownership or resolve the team first.

Service providers may retain their own billing, security or operational records under their policies and applicable obligations. Account deletion does not itself erase records held by a payment provider or copies other recipients have already obtained. Contact support.photomux@gmail.com for questions or requests concerning retained information.

7. Your choices and requests

You can review your saved work, delete personal content and close your account in PhotoMux. You can also request access to, correction of or deletion of personal information by contacting support.photomux@gmail.com. We may need to verify that a request comes from the account holder. Available privacy rights depend on your location and applicable law.

You can revoke PhotoMux's Google connection at https://myaccount.google.com/connections, or revoke GitHub authorization in your GitHub account settings. Revoking a provider connection prevents future authorized sign-in; it does not by itself delete information already stored in PhotoMux. Use PhotoMux's account deletion control or contact support for deletion.

8. Children, updates and contact

PhotoMux is not intended for children under 13. If you believe a child has provided personal information, contact us so we can investigate.

We will post updates to this policy with the revised date above. For questions about this policy, Google account data or a privacy request, email support.photomux@gmail.com. Website: https://photomux.com.