What we collect
- Account: your email, name (optional) and a hashed password.
- Usage: the jobs you run (prompts, settings, model, credits, status) and your credit history.
- Files: images, video and audio you upload or link, and the files you make.
- Payments: handled by Stripe. We receive the purchase record, not your card details.
- Connected apps: which assistants you connected and when they last used Typeshoot.
- Technical: IP address and basic request logs, for security and rate limits.
Why we use it
- To run the service you asked for: generating, editing and storing your files, and billing credits (performance of a contract).
- To keep it safe: preventing abuse, free-credit farming and misuse of faces (legitimate interest).
- To meet legal duties such as tax records for purchases (legal obligation).
- To send account emails: confirmation, password reset and important changes. We do not send marketing without your consent.
We do not sell your data and we do not use your prompts or files to train AI models.
Who processes it
- fal.ai runs the AI models; it receives prompts and the files a job uses.
- Model providers behind fal (such as Google, OpenAI, ByteDance, MiniMax, Kling, ElevenLabs) may process the same inputs to produce the output.
- Stripe processes payments.
- Cloudflare stores files (R2) and delivers the site.
- Resend sends account emails.
- Your assistant (Claude, ChatGPT and so on) receives the results you ask it for, under its own privacy terms.
Some of these process data outside your country, including in the United States, under standard contractual clauses or equivalent safeguards.
How long we keep it
- Uploaded and imported files: deleted once a generation uses them, or after 24 hours.
- Files you make: kept in your library until you delete them or close your account.
- Brand kits: until you delete them.
- Job and credit records: as long as your account exists, and purchase records for as long as tax law requires.
- Abuse reports: as long as needed to handle them.
Cookies
We use only the cookies needed to sign you in and protect forms (a session cookie and a CSRF cookie). No advertising or tracking cookies.
Your rights
You can ask to access, correct, delete or export your data, and object to or restrict how we use it. Email hello@typeshoot.com; we reply within 30 days. You can also complain to your data protection authority.
Contact
[Company name], [Street, postcode, city], [Country]. hello@typeshoot.com