The short version#
| What | Why we have it |
|---|---|
| Email address | Signing you in, receipts, account notices. |
| Password | Stored only as a one-way hash. We cannot read it. |
| Prompts, uploads, outputs | Running the generation and showing you your library. |
| Credit balance and history | Charging the right amount and answering "where did my credits go". |
| Stripe customer and subscription ids | Linking a payment to your account, renewals, refunds. |
| Log data (IP, user agent, timestamps) | Security, abuse prevention, debugging. |
We do not sell personal information, we do not share it with advertisers, and we do not run ad tracking on the site.
Information you give us#
- Account details. Your email address, and a password which is stored only as a salted one-way hash — nobody at T2IG can read it, which is also why we can only reset it, never tell you what it was.
- What you create. Prompts, reference images, audio you upload, settings, project files, and the images, videos, voiceovers and songs that come out.
- What you write to us. Support email, and anything you send with it.
Information collected automatically#
- Log data. IP address, browser and device type, pages requested and timestamps. Used to keep the service up, to investigate abuse, and to work out what broke.
- A session cookie. Set when you sign in, so the next page knows it is you. It is not used for advertising or cross-site tracking.
- Browser storage. Small preferences, such as your light/dark choice, are kept in your own browser and never sent to us.
Payments#
Card numbers never reach T2IG. Checkout is hosted by Stripe, a PCI DSS Level 1 service provider, and the card is entered on their page, not ours.
What comes back to us from Stripe and is stored against your account: a Stripe customer id, a payment or subscription id, the amount, the currency, the status, and — for showing you which card renewed — the card brand and its last four digits. Stripe's own handling of your data is covered by Stripe's privacy policy.
How we use it#
- To run the service: generate what you asked for, keep your library, show your balance.
- To take payment, grant credits, process refunds and prevent payment fraud.
- To answer you when you write to us.
- To keep the service secure and to enforce the Acceptable Use Policy.
- To understand, in aggregate, which tools get used, so we build the right things.
We do not use your prompts or outputs to train our own models, and we do not hand them to anyone for that purpose.
Who else sees your data#
Only the services needed to make the product work:
- Model providers. When you run a generation, the prompt — and any image or audio you supplied — is sent to the provider of the model you picked, so it can produce the result. This is unavoidable: it is where the work happens. Each provider handles it under its own policy, and some retain input for a period for their own abuse monitoring.
- Stripe, for payments and subscriptions.
- Our content delivery network, which stores and serves your generated media so it loads quickly.
- Our hosting provider, which runs the servers the application sits on.
Beyond that: we disclose data if the law requires it, and we may transfer it as part of a sale or merger of the business — in which case this policy continues to apply until you are told otherwise.
Cookies#
T2IG sets a session cookie when you sign in, and nothing else. There are no advertising cookies, no third-party analytics tags and no cross-site trackers on the site. Blocking the session cookie will stop you from staying signed in.
How long things are kept#
- Account details — while the account exists.
- Your generations and uploads — until you delete them or close the account.
- Payment and credit records — kept after an account closes where accounting and tax rules require it. These are transaction records, not your creative work.
- Server logs — a rolling window, then discarded.
- Backups — deleted content can persist in routine backups for a short period before those age out.
Your choices#
Write to info@t2ig.com and we will, within a reasonable time:
- tell you what we hold about you,
- give you a copy of your account data and your generated work,
- correct anything that is wrong,
- delete your account and its content, or
- stop sending you anything that is not a transactional notice.
Depending on where you live you may have these as statutory rights. We apply them to everyone regardless, because drawing a line by postcode is not a good way to treat people. We will not charge you for a reasonable request, and we will not make you justify it.
Children#
T2IG is not for anyone under 18 and we do not knowingly collect information from children. If you believe a child has created an account, tell us at info@t2ig.com and we will remove it.
Security#
Traffic is encrypted in transit with TLS. Passwords are stored only as salted hashes. Payment credentials never touch our systems. Access to production data is limited to what operating the service requires.
No service is perfectly secure. If we discover a breach affecting your personal information we will tell you, and any regulator we are required to tell, without undue delay.
Where your data is processed#
T2IG's servers, its content delivery network and the model providers it calls are located in several countries, including the United States. Using the service means your data is processed in those places.
Changes to this policy#
The date at the top shows the current version. If we make a change that materially affects how we use your personal information, we will tell you by email or in the app before it takes effect.
Contact#
info@t2ig.com for anything in this policy, including access and deletion requests.