Privacy Policy

Effective August 5, 2026

Information we collect

Gray Rabbit uses Supabase Authentication for Google sign-in. We receive your email address, display name, profile image, account identifier, and sign-in session information. We store your credit balance, credit activity, purchases, and operational records for text-to-image generation requests.

Text-to-image processing

When you generate an image, your prompt is first sent through Creem Moderation for policy screening. Allowed prompts are then sent through Gray Rabbit to Replicate for the requested model run. We do not store the raw prompt in the application database. We store prompt length buckets, selected style, aspect ratio, moderation decision data, model details, provider response data, status, timing, and error details for reliability, credit handling, abuse prevention, and support.

Payments

Creem acts as merchant of record for credit purchases and processes checkout, payment, tax, receipt, refund, and fraud-prevention information. Gray Rabbit does not receive or store your full payment-card number. We may receive purchase identifiers, customer details, product, amount, currency, payment status, and refund or dispute information needed to deliver credits and support your purchase.

Hosting, security, and analytics

Cloudflare provides hosting, security, and standard request logs. Supabase provides authentication and database services. Google provides sign-in. Replicate processes generation requests. These providers may process data in countries other than your own.

Cookies and storage

We use essential storage and session technologies to keep accounts signed in and secure. We do not currently use advertising cookies or cross-site behavioral tracking. See our Cookie Policy for details.

Retention

We keep account and credit records while your account is active. Operational generation records are retained only as long as reasonably needed for reliability, support, security, and legal compliance. Payment and transaction records may be retained for tax, accounting, fraud, chargeback, and legal obligations.

Your choices

You may request access, correction, or deletion of your Gray Rabbit account information. Some transaction, security, or legal records may need to be retained. You can also sign out, stop using the service, or manage browser storage through your browser settings.

Children

Gray Rabbit is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Contact

Privacy and account-data requests can be sent to service@grayrabbitai.com.