Privacy Policy

1. Controller Information

"WebSight Group" Ltd. operates Free AI Generator and acts as data controller for personal data processed through the Service.

Bulgaria, Sofia, Manastirski Livadi, 11 Boyan Petrov St

Company Number (EIK/UIC): 208723539

Contact: contact@free-ai-generator.com

2. Data We Process

2.1 Account Data (if you sign in)

• Name, email, and profile identifiers received from your authentication provider (for example Google)
• Latest sign-in IP address and derived country code associated with your account (used for account security, abuse prevention, and aggregate analytics)
• Account preferences and usage history linked to your account

2.2 Billing Data (for paid plans)

• Subscription status, Stripe customer ID, invoice IDs, and billing events
• Receipt and payment status metadata
• We do not store full payment card details; payment processing is handled by Stripe

2.3 Content and Tool Data

• Prompts you submit to AI tools
• Images you upload for processing
• Generated outputs and related job metadata needed to deliver the service

2.4 Technical and Security Data

• IP address, hashed IP, request logs, error logs, and anti-abuse signals
• Device, browser, and usage analytics information
• Cookie-related identifiers (essential and analytics)

3. Why We Process Data (Legal Bases)

• Contract performance: to provide the Service, process tool requests, manage accounts, and support billing operations
• Legitimate interests: to secure, monitor, and improve the Service, prevent abuse, and maintain reliability — including automated decisions about eligibility for free credits or promotional benefits based on abuse-risk signals such as IP address characteristics
• Legal obligations: to comply with accounting, recordkeeping, and lawful authority requirements
• Consent where required: for analytics and similar non-essential tracking technologies

4. Third-Party Processors and Recipients

We work with specialized providers to operate the Service, including:

• AI processing providers (for generation, editing, and description tasks)
• Stripe (payments and billing infrastructure)
• Google OAuth (authentication) and Google Analytics (usage analytics)
• CDN and hosting providers (asset delivery and infrastructure)
• IP geolocation provider (used transiently to derive a country code from your sign-in IP; only the resulting country code is stored)

These providers process data under their own terms and privacy policies. We only share what is necessary for service operation, security, and legal compliance.

5. International Data Transfers

Your data may be processed outside your country, including outside the EEA, depending on service providers used. Where required, we rely on appropriate transfer safeguards under applicable data protection law.

6. Retention

• Processing logs and job metadata: generally retained for up to 30 days
• Security and abuse-prevention logs: generally retained for up to 90 days
• Billing records: retained for up to 10 years where required by accounting or legal recordkeeping rules
• Temporary processing data: deleted when no longer needed for service delivery or legal/security purposes

7. Cookies and Tracking

We use essential cookies for core functionality and security. We also use analytics technologies (including Google Analytics via Google Tag Manager) to understand service usage and improve performance. Analytics cookies are only set after you give consent via the cookie banner.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working correctly.

Change my cookie preferences

8. AI Data Handling

Prompts and uploaded content are sent to third-party AI providers when needed to complete your request. We do not claim ownership over your generated content.

You remain solely responsible for the legality and use of content submitted to and produced by the Service.

9. Security

We use reasonable technical and organizational safeguards, including encrypted transport (HTTPS), access controls, and operational monitoring. No online service can guarantee absolute security.

10. Children's Privacy

The Service is intended for users aged 16+ by default. Some tools are restricted to 18+ as specified in those tool interfaces and policies. We do not knowingly process personal data from users below applicable age limits.

11. Your Rights

Depending on applicable law (including GDPR), you may have rights to access, rectify, erase, restrict processing, object, and request portability of your personal data, as well as to withdraw consent where processing is based on consent.

To exercise rights, contact us at contact@free-ai-generator.com. You may also lodge a complaint with your local supervisory authority.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updated versions are posted on this page with a revised "Last Updated" date. Continued use of the Service after updates means you accept the revised policy.