Privacy Policy

1. Data we collect

Account data: your email address, the name you enter, and your password, stored only as a hash (it cannot be read back).

Session and security data: your IP address and browser type (user agent) when you sign in, and records of sign-in attempts to prevent abuse.

Content you create: prompts, reference images and videos you upload, @TAG elements, and the generated videos and images. Uploads and results are stored encrypted on our servers.

Transaction data: your credit history, top-up orders (amount, status, payment method) and, for manual QRIS payments, the payment screenshot you upload.

We never store card numbers, PINs or bank account details. Automatic payments are processed by Midtrans on their own pages.

2. How we use data

Running the service: creating your account, processing generation requests, storing and showing your results.

Payments: recording top-ups, adding credits, verifying manual QRIS payments, and refunding credits when a render fails.

Security: preventing fraud, abuse and unauthorised access.

We do not sell your data or use it for advertising. The site runs no advertising trackers.

3. Who we share data with

AI model providers: the prompt and reference media of a generation request are sent to the third-party AI model provider that renders your video or image, only as far as that request needs.

Midtrans: the data needed for automatic payments (amount, email, name).

Infrastructure: Cloudflare (network and security) and our server and backup providers process data on our behalf.

The public: only results you choose to share in the Gallery, with their prompt and your first name. You can stop sharing at any time.

Authorities: when required by applicable Indonesian law.

4. Cookies

We only use necessary cookies: the sign-in session (aixe_session), your language (lang) and your active workspace (aixe_ws). No advertising cookies.

For visit statistics we use Cloudflare Web Analytics, which sets no cookies and only shows aggregate data (such as visits per page), not individual profiles.

We also count visits anonymously on our own server without cookies: each visitor is a daily hash that cannot be tied to a person or to other days, used only for visitor counts. If you arrive through an invite link, the invite code is kept in a cookie (30 days) so the referral bonus can be paid.

5. How long we keep data

Account data, content and results are kept while your account is active or until you delete them.

Sign-in sessions expire after 14 days. Temporary render files are deleted automatically (inputs after 1 day, working folders after 30 days).

Encrypted backups are kept for recovery and rotated. Transaction records may be kept longer where the law requires.

6. Security

Connections always use HTTPS. Passwords are hashed, media files are encrypted and admin access is logged. No system is perfectly secure, but we take reasonable steps to protect your data.

7. Your rights

You may access, correct and ask us to delete your personal data, and withdraw consent. You can manage some data yourself on the Account and History pages (for example deleting results or stopping Gallery sharing). For anything else, including deleting your account, contact us.

8. Age

The service is meant for users aged 18 or over, or younger users with a parent's or guardian's permission.

9. Changes

We may update this policy. The effective date above will change, and important changes will be announced on the site.

10. Contact

An official contact address is being set up and will be listed here.