Privacy Policy

Last updated: April 2026

1. Introduction

Sirv AI Studio ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image processing services. For security disclosures, email security@sirv.studio.

2. Information We Collect

2.1 Information You Provide

  • Account information (email address, name) when you sign up
  • Images and files you upload for processing
  • Payment information when purchasing credits
  • Communications you send to us

2.2 Automatically Collected Information

  • Device information (browser type, operating system)
  • Usage data (features used, processing history)
  • IP address and approximate location
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

  • Provide and improve our AI image processing services
  • Process your images using third-party AI providers (fal.ai)
  • Manage your account and process payments
  • Send service-related communications
  • Analyze usage patterns to improve our services
  • Detect and prevent fraud or abuse

4. Image Processing and Storage

  • Uploaded images are temporarily processed through our AI providers
  • Processed images may be cached temporarily to improve performance
  • If you connect Sirv CDN, images are stored according to your Sirv account settings
  • We do not use your images to train AI models
  • Images not saved to Sirv are automatically deleted after processing

5. Third-Party Services

We use the following sub-processors:

  • fal.ai - AI image and video model inference
  • Sirv - Image CDN, storage, and asset delivery
  • Stripe - Payment processing and subscription billing
  • Vercel - Application hosting and edge delivery
  • Hetzner - Database, queue, and worker infrastructure (EU)
  • Inngest - Durable background job orchestration
  • PostHog - Product analytics
  • Sentry - Error monitoring
  • Google / GitHub - OAuth authentication

Each sub-processor has its own privacy policy governing the use of your information. We have a Data Processing Agreement (DPA) in place with each provider.

6. Data Retention

We keep account and billing records for the life of your subscription plus 7 years for tax and accounting compliance. Workspace assets remain available while the workspace is active. After cancellation, asset data is purged within 30 days unless you request earlier deletion. Audit logs are retained for 12 months. Anonymous analytics events are retained for up to 24 months.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest. However, no method of transmission over the Internet is 100% secure.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to or restrict processing of your information
  • Data portability
  • Withdraw consent at any time

9. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how our services are used. You can control cookies through your browser settings.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@sirv.studio