Privacy Policy

Short and honest. Here is exactly what Content Generator collects, why, the lawful basis for it, and what you can ask us to do with your data.

Effective date: July 3, 2026

Who we are

Content Generator is operated by Aashapura LLC ("we", "us", "our"), the data controller responsible for the personal data described here. If you have any question about your data, or want to exercise any of the rights below, email us at [email protected] or write to us at [registered address].

What we collect

Content Generator is an API-first, multi-tenant platform. We collect only what we need to run your account, deliver generations, meter usage, and bill for it:

• Account email (provided at signup). When you create a tenant with POST /v1/signup you give us an email address, which we use to identify your account, contact you about the service, and support you. This is the primary piece of personal data we hold.
• Generation content. The prompts you send to /v1/generate/* and the content we return are stored as your job history so you can retrieve past results (GET /v1/jobs) and so we can support and secure the service. Please do not put passwords, payment card numbers, or other sensitive secrets into a prompt.
• Usage and metering records. We record the units you consume per billing period — the metering that powers GET /v1/usage and any overage billing. This is operational data tied to your tenant.
• Billing data. If you exceed your included free units, overage is billed through Stripe. We do not see or store your full card details — Stripe handles them. We retain invoice and metering records for accounting.
• Technical and security data. Standard server logs (request time, endpoint, IP, and API-key identifier) used to operate the service, meter accurately, prevent abuse, and keep tenants isolated.

We do not run advertising cookies or third-party behavioral analytics on this service, we do not knowingly collect data from children (see below), and we do not collect special-category data (such as health or biometric data).

How we use your data

• To create and run your tenant account and authenticate your API key.
• To generate content you request and keep your job history available to you.
• To meter usage accurately and bill overage through Stripe.
• To answer support requests and contact you about your account or the service.
• To keep the platform secure, enforce tenant isolation, prevent abuse, and comply with our legal obligations.

Lawful basis (GDPR)

Where the GDPR applies, we rely on the following lawful bases:

• Contract — to provide the API and account you signed up for, including generating content, metering usage, and billing.
• Legitimate interests — for securing the service, preventing abuse, maintaining tenant isolation, and improving reliability, balanced against your rights.
• Legal obligation — where we must retain records (for example, for tax or accounting).
• Consent — for any optional product or marketing email, which you can withdraw at any time.

Third parties we rely on

• Payment processing. Overage billing is handled by Stripe. We do not see or store your full card details — Stripe processes them as an independent controller under its own privacy terms.
• Content generation. Generation runs on our own self-hosted model gateway; your prompts are processed to produce your result and stored as your job history. We do not sell prompts or outputs, and we do not use your content to train third-party models.
• Hosting and infrastructure. The service and its data run on our own self-hosted infrastructure fronted by a content-delivery and security network. Providers that process data on our behalf do so as processors under written terms.

We never sell your personal data, and we never share it for third-party advertising.

International transfers

We are based in the United States, so if you use the service from outside that country your data will be transferred to and processed there. Where we transfer personal data out of the UK, EU, or EEA, we rely on an appropriate safeguard — such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision — so your data keeps an equivalent level of protection.

How long we keep it

We keep your account email and generation job history for as long as your account is active and for a reasonable period afterwards so you can return. Usage, metering, and billing records we must keep for tax or accounting are retained for the period the law requires. You can ask us to delete your account and its data at any time (see your rights). When a retention period ends, we delete or anonymize the data.

Your rights

Depending on where you live (including under the GDPR and California's CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct anything that is wrong (rectification).
• Ask us to delete your data (erasure).
• Object to or restrict how we use it, and to data portability.
• Withdraw consent at any time for anything based on consent.
• As a California resident: know what we collect, request deletion, and not be discriminated against for exercising your rights. We do not sell or "share" personal information as those terms are defined under the CCPA/CPRA.

To exercise any of these, email us at [email protected] and we will respond within the time the law allows (generally within 30–45 days). You also have the right to complain to your local data protection authority.

Children's data

This service is intended for businesses and professionals and is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, email us at [email protected] and we will delete it.

Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit, per-tenant isolation enforced on every request, access controls, and a restrictive content-security policy. No method of transmission over the internet is perfectly secure, but we work hard to keep your information safe and will notify you and the relevant authority of a qualifying breach where the law requires.

Changes to this policy

We may update this policy as the service evolves. When we do, we will change the effective date at the top, and we will make material changes clear.

Contact

Questions about your privacy, or a request to exercise your rights? Email us at [email protected] or write to Aashapura LLC at [registered address]. This policy is governed by the laws of the United States.

This page is a good-faith policy, not legal advice. We recommend having it reviewed by a qualified lawyer for your jurisdiction.