Privacy Policy

1.1 Information You Provide

• Account Information: Name, email address, username, and profile photo when you create an account
• Payment Information: Billing details processed securely by Stripe (we do not store full payment card numbers)
• User Content: AI prompts, generated images and videos, captions, comments, and other content you create or upload
• Communications: Messages you send us via support or contact forms
• Profile Information: Bio, avatar, cover image, and other optional profile details

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, generation activity, and interaction data
• Device Information: Device type, operating system, browser type, and unique device identifiers
• IP Address: Logged for security monitoring, fraud prevention, and abuse detection
• Cookies and Similar Technologies: Session tokens, authentication tokens, and preference data stored locally
• Analytics Data: Aggregated usage statistics via Google Analytics 4

1.3 Information from Third Parties

• Sign in with Google / Apple: When you authenticate via Google or Apple, we receive your name, email address, and profile picture as permitted by your privacy settings with those services
• Payment Processors: Transaction confirmation and subscription status from Stripe

We use the information we collect to:

• Provide, operate, and improve the Gather AI service
• Process transactions and manage your subscription and credits
• Send transactional emails (account verification, password resets, receipts)
• Send notification emails (follows, comments) based on your preferences
• Personalize your experience and recommend content
• Monitor and enforce our Terms of Service and community guidelines
• Detect, prevent, and respond to fraud, security threats, and abuse
• Comply with legal obligations and respond to lawful requests
• Analyze usage patterns to improve our service
• Communicate updates, new features, and promotional offers (with your consent where required)

We do not sell your personal information. We share information only in these circumstances:

• Service Providers: We share data with trusted third-party providers who help us operate the Service, including:
  • Supabase (database and authentication hosting)
  • Stripe (payment processing)
  • Resend (transactional email delivery)
  • Google Gemini, Kling AI, MiniMax (AI generation services)
  • Google Analytics (usage analytics)
  • Firebase / Google (web hosting)
• Public Profile Content: Your username, display name, profile photo, and any content you post publicly are visible to other users of the Service
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Consent: We may share information with third parties when you have provided explicit consent

When you use Gather AI to generate images or videos, your prompts and relevant metadata are transmitted to third-party AI providers (Google Gemini, Kling AI, MiniMax). These providers process your prompts under their own privacy policies. We encourage you to review:

• Google's Privacy Policy (for Gemini image generation)
• Kling AI's Privacy Policy (for Kling video generation)
• MiniMax's Privacy Policy (for MiniMax video generation)

Do not include sensitive personal information in your prompts.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until account deletion is completed (30-day grace period applies)
• Generated content: Deleted upon account deletion
• Financial records: Retained for 7 years as required by applicable tax and financial regulations
• Security logs (IP logs): Retained for 90 days for fraud and abuse prevention
• Analytics data: Aggregated, anonymized data may be retained indefinitely

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information through your account settings or by contacting us
• Deletion: Request deletion of your personal data. You can initiate this directly in the app at Settings → Delete Account
• Portability: Request a machine-readable copy of your personal data
• Opt-out of Marketing: Unsubscribe from promotional emails by following the unsubscribe link or contacting us
• Email Notifications: Control notification emails within the app at Settings → Email Notifications
• California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information)
• EEA/UK Residents (GDPR): You have rights of access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with your local supervisory authority

To exercise your rights, contact us at info@isocialize.me. We will respond within 30 days.

If you use "Sign in with Apple," Apple may provide us with a limited set of information including your name and email address. Apple allows you to hide your email address, in which case Apple generates a unique relay email address. We will use this relay address to communicate with you. Your use of Sign in with Apple is also subject to Apple's Privacy Policy.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at info@isocialize.me. We will delete such information promptly upon verification.

For users between 13 and 17, parental consent is required to use the Service.

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Row-Level Security (RLS) on all database tables
• Secure, hashed credential storage
• IP-based fraud monitoring and rate limiting
• Regular security reviews

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party service you visit.

We use cookies and similar technologies for authentication, session management, and analytics. You may control cookies through your browser settings, but disabling cookies may affect the functionality of the Service. We use Google Analytics 4 for aggregated usage analytics; you can opt out via Google's opt-out tools.

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy with a new effective date and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

For privacy inquiries, data requests, or to exercise your rights, contact our privacy team:

We will respond to all verified privacy requests within 30 days.