Privacy Policy

Effective Date: May 01, 2025 Last Updated: May 22, 2025

QubicAI values your trust. We are committed to safeguarding your privacy and data rights with the highest industry standards. This policy outlines how we collect, use, protect, and empower you with control over your data.

1. Data We Collect

We adhere to a data minimization principle, collecting only what is essential to deliver the core services.

1.1. Authentication & Identity

• Non-custodial wallet address (public, zero custody)

• API access keys (stored hashed and salted)

• Optional contact email (if user consents)

1.2. Creative Usage Data

• Generation metadata: prompts, formats, timestamps

• Uploaded materials (temporary; auto-deleted if unused within 24h)

• Generated asset logs (ID-only; no payload retention)

1.3. Technical Diagnostics

• Anonymized device & browser info

• Obfuscated IP address (Geo-region only, never stored in full)

• Event logs (for security and bug tracking, not user behavior profiling)

We do not collect biometric identifiers, precise GPS, sensitive PII, or behavior analytics unless strictly required for platform functionality.

---

2. How Your Data Is Used

We use the collected data only to:

• Authenticate and authorize access securely

• Generate AI assets based on your input

• Monitor and improve system performance

• Detect abuse or misuse (e.g., spam, model attacks)

• Provide opt-in support and critical updates

We never sell or share your data with advertisers, brokers, or data processors not bound by this policy.

---

3. Your Privacy Rights

You retain full control over your data and can:

• Access: View what data is stored about you

• Delete: Request permanent deletion of all personal and creative data

• Export: Download a copy of your usage logs and asset history

• Restrict: Block non-essential cookies, trackers, or logging features

• Withdraw: Cancel account and revoke permissions at any time

---

4. Retention & Auto-Deletion

• Generation logs: max 30 days, then auto-deleted

• Uploaded files: auto-deleted after 24 hours if unused

• User accounts: all linked data is deleted within 72 hours of request

• Backups: encrypted and auto-purged after 7 days

---

5. Security & Encryption Standards

• TLS 1.3 enforced for all data transfers

• AES-256 encryption on all stored data

• Zero-trust access control across all internal systems

• IPFS used for public asset links (immutable, censorship-resistant)

• Annual third-party security audits and real-time anomaly detection

• Regular penetration testing by certified white-hat teams

---

6. Third-Party Providers

QubicAI only works with partners who comply with:

• GDPR (EU)

• CCPA (California)

• PDPA (Singapore)

• ISO 27001 certified when handling data

We never allow third-party tools that harvest behavioral data for profiling or ad-targeting.

---

7. Children & Minors

QubicAI is not intended for anyone under the age of 13, or the legal minimum in your jurisdiction. We do not knowingly collect or retain data from minors. Accounts suspected to be operated by underage users will be disabled and data purged.

---

8. Updates to This Policy

Any material updates to this Privacy Policy will be announced via:

• In-platform notifications

• Email alerts (opt-in)

• GitBook changelog

We encourage users to review the policy regularly. Continued use constitutes agreement with any changes.