Privacy Policy

1. Controller Information

"WebSight Group" Ltd. operates Free AI Generator and acts as data controller for personal data processed through the Service.

Bulgaria, Sofia, Manastirski Livadi, 11 Boyan Petrov St

Company Number (EIK/UIC): 208723539

Contact: contact@free-ai-generator.com

2. Data We Process

2.1 Account Data (if you sign in)

• Name, email, and profile identifiers received from your authentication provider (for example Google)
• Latest sign-in IP address and derived country code associated with your account (used for account security, abuse prevention, and aggregate analytics)
• Account preferences and usage history linked to your account

2.2 Billing Data (for paid plans)

• Subscription status, Stripe customer ID, invoice IDs, and billing events
• Receipt and payment status metadata
• We do not store full payment card details; payment processing is handled by Stripe

2.3 Content and Tool Data

• Prompts you submit to AI tools
• Images you upload for processing
• Generated outputs and related job metadata needed to deliver the service

2.4 Technical and Security Data

• IP address, hashed IP, request logs, error logs, and anti-abuse signals
• Device, browser, and usage analytics information
• Cookie-related identifiers (essential and analytics)

3. Why We Process Data (Legal Bases)

• Contract performance: to provide the Service, process tool requests, manage accounts, and support billing operations
• Legitimate interests: to secure, monitor, and improve the Service, prevent abuse, and maintain reliability — including automated decisions about eligibility for free credits or promotional benefits based on abuse-risk signals such as IP address characteristics
• Legal obligations: to comply with accounting, recordkeeping, and lawful authority requirements
• Consent where required: for analytics and similar non-essential tracking technologies

4. Third-Party Processors and Recipients

We work with specialized providers to operate the Service, including:

• AI processing providers (for generation, editing, and description tasks)
• Stripe (payments and billing infrastructure)
• Google OAuth (authentication) and Google Analytics (usage analytics)
• Bunny.net / BunnyCDN (storage and delivery of uploaded images, generated outputs, and related media files)
• CDN and hosting providers (asset delivery and infrastructure)
• IP geolocation provider (used transiently to derive a country code from your sign-in IP; only the resulting country code is stored)

These providers process data under their own terms and privacy policies. We only share what is necessary for service operation, security, and legal compliance.

5. International Data Transfers

Your data may be processed outside your country, including outside the EEA, depending on service providers used. Where required, we rely on appropriate transfer safeguards under applicable data protection law.

6. Retention

• Prompts, uploaded images, generated outputs, and tool job metadata: we may retain these records for as long as reasonably necessary to operate the Service, preserve account and history functionality, troubleshoot incidents, enforce our Terms, prevent abuse, analyze product usage, improve reliability, support disputes or legal claims, and satisfy legal obligations.
• Guest usage records: we may also retain guest-submitted content and related technical metadata where needed for service continuity, abuse prevention, analytics, debugging, and enforcement. We do not guarantee automatic deletion after a fixed period.
• Security and abuse-prevention logs: typically retained for at least 90 days and, where reasonably necessary, longer for fraud prevention, incident investigation, or enforcement.
• Billing and accounting records: retained for at least 10 years where required by tax, accounting, or legal recordkeeping rules.

We do not promise automatic deletion of stored content on a short schedule. Retention decisions depend on the nature of the data, the purpose for which it was collected, operational necessity, legal requirements, and your rights under applicable law.

Uploaded source images and generated outputs are stored and delivered through our third-party storage and CDN provider infrastructure where needed to operate the Service.

7. Cookies and Tracking

We use essential cookies for core functionality and security. We also use analytics technologies (including Google Analytics via Google Tag Manager) to understand service usage and improve performance. Analytics cookies are only set after you give consent via the cookie banner.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working correctly.

Change my cookie preferences

8. AI Data Handling

Prompts and uploaded content are sent to third-party AI providers when needed to complete your request. Uploaded images and generated outputs may also be stored and delivered through third-party storage/CDN providers used to operate the Service. We do not claim ownership over your generated content.

All AI-generated images produced by the Service are automatically marked as AI-generated using embedded metadata (such as EXIF comment fields or equivalent format-specific tags). This labelling is applied to all output formats and is required under applicable AI transparency regulations.

You remain solely responsible for the legality and use of content submitted to and produced by the Service.

9. Security

We use reasonable technical and organizational safeguards, including encrypted transport (HTTPS), access controls, and operational monitoring. No online service can guarantee absolute security.

10. Children's Privacy

The Service is intended for users aged 18 and older. We do not knowingly collect or process personal data from anyone under 18. If you believe we have received data from a minor, contact us at contact@free-ai-generator.com and we will delete it promptly.

11. Your Rights

Depending on applicable law (including GDPR), you may have rights to access, rectify, erase, restrict processing, object, and request portability of your personal data, as well as to withdraw consent where processing is based on consent.

Where you request erasure, we will review the request and delete or anonymize data where required by applicable law, subject to lawful exceptions such as recordkeeping duties, security, fraud prevention, claims handling, or other overriding legal grounds.

To exercise rights, contact us at contact@free-ai-generator.com. You may also lodge a complaint with your local supervisory authority.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updated versions are posted on this page with a revised "Last Updated" date. Continued use of the Service after updates means you accept the revised policy.