Privacy Policy

Last updated: November 3, 2026

Account information

The existing PocketBase account system stores your account ID, email, verification state, nickname and optional avatar. Google sign-in uses basic identity scopes. Existing account IDs are retained when moving the member service to the production host.

Your drafts, images and results

Unsynced browser projects and photos stay on that browser. Only projects you explicitly choose to import are stored in the member account. Submitted generation images are sent from the server to OpenAI under its service and content policies. Generated results and synchronized images are privately stored and require the owning account. Images already explicitly synchronized may be moved through a restricted encrypted transfer when deploying the account service.

Mail, payments and suppliers

Resend sends account verification, password reset and registration notices from the backend using XMGO <xmgo@info.mailgo.net>. No historical member welcome-mail batch is sent. PayPal Checkout is not enabled and this site does not collect payment-card data. API keys and supplier cost records are not exposed to ordinary members.

Sessions, logs and data requests

HttpOnly session cookies support account access; browser storage retains language and project drafts. Limited request, security and usage metadata support access controls and reconciliation. No automatic cross-browser import occurs. Contact pay@xmgo.com to ask about access, correction, retention or deletion. Exact retention schedules, operator details and any additional legal transfer arrangements are still being finalized for paid public operation.