Privacy Policy

1. Overview

MicroCreatorr ("we", "us") operates an AI-powered image and video generation platform. This Privacy Policy describes the data we collect when you use the Creation Studio, Product Ad Generator, Explore gallery, and social publishing features, and how that data is handled — including by the third-party AI providers and social platforms we integrate with.

2. Data We Collect

• Prompts and inputs — text prompts, negative prompts, and any reference images or videos you upload for generation or restyling.
• Generated media — images and videos produced by the AI models you select, along with the model used and generation parameters (aspect ratio, style).
• Ad creation records — template selection, product name, headline, and call-to-action text you enter in the Product Ad Generator.
• Social account credentials — OAuth access tokens, refresh tokens, and account metadata when you connect Instagram, Facebook, or TikTok.
• MCP server configuration — names, URLs, and auth tokens for external Model Context Protocol servers you register.
• Technical data — standard request metadata (timestamps, error logs) needed to operate and debug the service.

3. Third-Party AI Providers

To generate images and video, your prompts and any uploaded reference media are sent to the AI provider backing the model you select. We currently integrate with:

• OpenAI (GPT Image 1)
• Google Gemini (Nano Banana, Veo 3.1, Veo 3.1 Fast)
• Stability AI (Stable Diffusion 3.5, Stable Image Core)
• xAI (Grok Image)
• Kling (Kling 3.0 Pro, Kling 3.0 Standard)
• Runway (Runway Gen-4.5)
• Luma AI (Luma Ray3)
• fal.ai, hosting models from ByteDance (Seedance 2.0) and MiniMax (Hailuo 2.3 Fast), plus WAN 2.7 video restyling

Each provider processes the content you submit under its own privacy policy and data handling terms. We do not control how long these providers retain your prompts or media internally, though we select providers that offer commercial/API terms distinct from their consumer products where available. We recommend reviewing each provider's policy if you have sensitive data-handling requirements.

4. Social Media Connections

When you connect Instagram, Facebook, or TikTok, we store the OAuth access token, refresh token (if provided), and basic account metadata (account ID, display name) needed to publish content on your behalf. We only use these credentials to publish the specific media you explicitly submit through the "Publish to Social" action — we do not read your feed, messages, or other account data, and we do not post anything without an explicit publish action from you.

5. How We Use Your Data

• To generate the images and video you request and display results back to you.
• To maintain your generation history and ad creation records within the app.
• To publish content to social accounts you've explicitly connected and authorized.
• To operate MCP server connections you configure, and to expose this app's own generation tools to MCP clients you authorize.
• To monitor, debug, and improve the reliability of the service.

We do not sell your prompts, generated media, or account data to third parties.

6. Content Ownership

You retain ownership of the prompts you write and, to the extent permitted by the underlying AI provider's terms and applicable law, the images and video generated from them. Because generation is performed by third-party AI models, your rights to generated output are also subject to each provider's terms of use — some jurisdictions and providers impose restrictions on AI-generated content ownership. You are responsible for ensuring your use of generated content complies with applicable law and the rights of any third parties depicted or referenced in your prompts.

7. Data Retention

Ad creation records and publish history are retained in our database until you request deletion or your account is removed. Generation Studio session history is kept only in your browser session and is not persisted server-side unless produced through the Ad Generator. Social account tokens are retained until you disconnect the account or revoke access from the platform's own settings.

8. Security

We use industry-standard safeguards to protect stored credentials and generation records, including encrypted transport (HTTPS) for all API traffic and restricted server-side access to OAuth tokens. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored by the service.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to disconnect any linked social account at any time from Social Connections or remove an MCP server from MCP Connections. To request deletion of ad creation or publish history records, contact us using the details below.

10. Children's Privacy

MicroCreatorr is not directed at children under 13, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date above when we do. Continued use of the service after changes take effect constitutes acceptance of the revised policy.