Privacy Policy

1. Introduction

CosyCozy ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud-based AI image and video generation platform (the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and password (stored as a secure hash). If you register via third-party authentication (Google or Apple), we receive your email address and basic profile information from the provider.

2.2 Usage Data

We collect information about how you use the Service, including: prompts and parameters you submit for AI generation, generation history and status, credit transactions, and interaction timestamps.

2.3 Generated Content

AI-generated images and videos are stored in Cloudflare R2 cloud storage and associated with your account. You can delete your generated content at any time through the Gallery.

2.4 Technical Data

We automatically collect certain technical data when you visit our website, including IP address, browser type and version, device information, and pages visited. This data is used for security, analytics, and service improvement.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process your account registration and authentication
• Process payments and manage credit balances
• Send service-related notifications (e.g., generation completions)
• Respond to support requests and feedback
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Authentication, database, and real-time notifications
• AI Service Providers — For AI image and video generation (prompts are sent to AI servers)
• Cloudflare R2 — Cloud storage for generated images and videos
• Gumroad — Payment processing (Merchant of Record). Gumroad collects billing information directly and is subject to its own privacy policy.
• Vercel — Web hosting and serverless function execution

Each third-party service has its own privacy policy governing the data they process. We encourage you to review their respective policies.

5. Cookies & Local Storage

We use essential cookies and local storage for authentication session management and locale preferences. We do not use advertising or tracking cookies. Third-party services (such as Supabase and Gumroad) may set their own cookies as part of their functionality.

6. Data Retention & Deletion

We retain your account data and generation history for as long as your account is active. You can delete individual generated content from your Gallery at any time. If you wish to delete your entire account and associated data, please contact us at support@cosycozy.cc and we will process your request within 30 days.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access — Request a copy of your personal data
• Right to Rectification — Request correction of inaccurate data
• Right to Erasure — Request deletion of your personal data
• Right to Data Portability — Request your data in a machine-readable format
• Right to Object — Object to processing of your data for certain purposes

To exercise these rights, please contact us at support@cosycozy.cc. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect about you, (b) request deletion of your personal information, and (c) opt out of the sale of your personal information. We do not sell personal information to third parties.

9. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

✉️ support@cosycozy.cc