Privacy Policy

1. Information we collect

• Account records, such as your internal account identifier, account status, settings and agreement records.
• Google sign-in information, which may include your Google account identifier, verified email address, display name and profile image.
• Prompts, uploaded media, generated results, task settings and technical metadata needed to perform and secure creation requests.
• Order, payment status, Gem ledger and transaction information. Payment providers process payment credentials; Nonlucid does not store complete card details. Cryptocurrency wallet addresses and transaction hashes may be visible on public blockchains.
• Affiliate application, payee identity, address, attribution, commission, optional tax and encrypted payout information when you participate in the Affiliate Program.
• Device, browser, page, referral, IP-derived security data, timestamps, diagnostics and activity records used for fraud prevention, reliability and analytics.
• Support messages and information you submit when requesting assistance or account deletion.

2. How we use information

• Provide accounts, generation tools, storage, purchases, Affiliate features and customer support.
• Authenticate users, prevent abuse, investigate fraud and protect users, rights holders and the service.
• Process transactions, maintain accounting records and resolve payment or commission disputes.
• Measure feature performance, diagnose failures and improve service reliability.
• Comply with law, enforce our agreements and respond to valid legal requests.
• Send service messages and, where permitted, marketing communications that you can opt out of.

3. Legal bases

Depending on applicable law, we process information to perform our contract with you, based on your consent, to comply with legal obligations, and for legitimate interests such as securing and improving the service. Where consent is the basis, you may withdraw it without affecting earlier lawful processing.

4. How we share information

We may share only the information reasonably needed with providers that support hosting, storage, AI processing, authentication, email, payments, analytics, security and customer support. We may also disclose information to authorities when legally required, to protect rights and safety, or as part of a merger, financing, acquisition or transfer of the service.

We do not sell personal information. We do not publish your private uploads or generated results as public examples without separate permission.

5. Storage and retention

By default, Nonlucid keeps uploaded media for 24 hours, generated results for 24 hours, and removes complete prompts within 48 hours. Shorter deletion may occur when you delete an asset or account.

Account, agreement, order, Gem, Affiliate, security, fraud and audit records may be retained longer where needed to provide the service, settle transactions, enforce agreements, prevent repeat abuse or meet legal obligations. Records are deleted, anonymised or restricted when no longer needed.

6. Cookies and browser storage

We use essential cookies or similar storage for sessions, security, attribution, account deletion and saved preferences. Local browser storage may keep recent interface or creation data on your device. You can clear browser data, but doing so may sign you out, remove locally stored results or interrupt attribution.

If Nonlucid later introduces non-essential advertising or tracking cookies, we will provide any notice or choice required by applicable law before using them.

7. International processing and security

Providers may process information in countries other than your own. Where required, we use appropriate contractual or legal safeguards. We use reasonable technical and organisational measures, but no online service can guarantee absolute security.

8. Account deletion and your choices

You can request permanent account deletion from account settings after re-authentication. The request revokes active sessions, removes stored media, deletes or anonymises account data and may retain limited transaction, legal, fraud-prevention and audit records where required.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent or opt out of marketing. We may verify your identity before acting on a request.

9. Children

Nonlucid is only for adults aged 18 or older. We do not knowingly collect personal information from children. If we learn that a child has created an account or supplied personal information, we will take appropriate steps to remove it.

10. Changes and contact

We may update this Notice and will show the current version and date on this page. Questions or privacy requests may be sent to [email protected].