Privacy Policy

This Privacy Policy explains how Museify (the “Service”) collects, uses, shares, retains, and protects your personal information, and the rights you have. The controller of your personal information is Jin Bojin, an individual sole proprietor (“we”, “us”, or “our”), not a company or other organization.

This policy applies to the website museify.app and the Museify app, and forms part of our Terms of Service. For privacy questions, email support@museify.app.

We collect only the information needed to provide the Service:

• Account information: your email address, display name, and password (stored only as an argon2id hash, never in plain text). If you sign in with Google, we also receive your Google account email, name, profile picture, and account identifier.
• Product photos and ideas: the photos of your products you upload, the product card the Service reads from them (which you can lock and change), your confirmation that the product is yours, and in “Start from an idea” your descriptions and any style reference you upload.
• Tests and test history: the versions you test, the photos, videos and concept images we make, the ad results you enter, the winner you mark, test kits and spec sheets, and a timestamped history of each step.
• Image fingerprints: perceptual fingerprints (pHash) of concept images and style references, used only to detect concepts that are too close to a reference.
• Payment information: your plan, amount, billing period, credit balance, and payment status. Payment card data such as full card numbers is handled by Waffo Pancake; we do not receive or store it.
• Communications: email correspondence between you and us.
• Device and network information: your IP address and browser information (user agent) when you sign in, and access logs recorded by our servers.
• Usage information: credits used, photos and videos made, test kits, and similar data, used to calculate credits and improve the Service.
• Analytics data (subject to your cookie choices): through Google Analytics 4, pseudonymous identifiers, pages visited and actions on them, device and browser information, and approximate location (derived from IP address, which Google Analytics 4 does not store).

A product photo you upload may show a person wearing the product. You decide to upload it and are responsible for having that person’s permission. We use such a photo only to read the garment and as a reference for it: it is read by a text model and sent, with our AI model’s base photo, to the image model with the instruction to put the garment on our model. We never edit that person, make new images or videos of them, recognize who they are, or use the photo for anything else, and we never publish it.

The people in the photos and videos we make are AI-generated models created for the Service, not real people, so no one’s personal likeness is used to make them. If you believe a photo made with the Service shows you or someone you represent, email support@museify.app and we will look into it.

On paid plans you can make your own AI models. We store the traits you choose, the short description you write, the result of our check of that description, and the model photos, in your account; the description is sent to a text model to check it does not name a real person, and the traits and description are sent to the image model to make the photos. You cannot upload a photo of a person for this, and we do not use one.

We use personal information for the following purposes:

• Providing and maintaining the Service (signing in, reading your product photos, making photos, videos and concept images, packing test kits and spec sheets, keeping test histories): performance of our contract with you.
• Billing, credit calculation, and subscription management: performance of our contract; keeping tax and accounting records: legal obligation.
• Customer support and handling your requests: performance of our contract.
• Service notices (account verification, password resets, billing, and changes to the Terms of Service or this policy): performance of our contract and legitimate interests.
• Security, fraud and abuse prevention, and enforcement of the acceptable use policy, including similarity and trademark checks: legitimate interests and legal obligation.
• Website analytics and product improvement with Google Analytics 4: your consent in the EEA, the UK and Switzerland; legitimate interests elsewhere, where you can opt out at any time. Never used for advertising.

We do not use your content or Generated Content to train AI models, and we do not make decisions that produce legal or similarly significant effects on you based solely on automated processing.

We use the following cookies and browser storage:

• Strictly necessary: sign-in session cookies (tm_access_token and tm_refresh_token, which page scripts cannot read) and a record of your cookie choice. You cannot sign in without them, so they cannot be turned off.
• Functional: your interface language choice and preferences, saved in browser local storage, and temporary verification state used during Google sign-in (cleared when you close the tab).
• Analytics — Google Analytics 4 (Google LLC): the _ga and _ga_* cookies, which distinguish visitors with pseudonymous identifiers and expire after up to 2 years. They let us measure pages visited, device and browser, and approximate location. Data is kept for the retention period set in our Google Analytics account. We do not use Google Analytics for advertising, and Google signals and ad personalization are off. For how Google processes this data, see the Google Privacy Policy (policies.google.com/privacy).
• Marketing: we do not use marketing or advertising tracking cookies.

Your choice. If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are set only if you choose “Accept all” in the cookie banner; until then, Google Analytics is not loaded. Elsewhere, analytics are on by default and you can turn them off. You can change your choice at any time under Cookie settings at the bottom of our website; withdrawing consent deletes the Google Analytics cookies. You can also refuse or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). If you refuse strictly necessary cookies, you will not be able to sign in.

We do not sell your personal information or share it with third parties for their advertising.

Payment card data is handled exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.

We share personal information only in the following cases:

• Service providers: to operate the Service, we share information necessary for each provider to perform its role with Waffo Pancake (Merchant of Record: payments, taxes, invoicing, and refunds); OpenRouter (AI models: your product photos, our models’ base photos, descriptions of ideas, style references, and the photos a video starts from); Cloudflare (website hosting, content delivery, file storage, image processing, and DNS); Railway (backend hosting); Supabase (database); Resend (email delivery: email addresses and message content); and Google (Google sign-in and Google Analytics 4, subject to your cookie choices).
• Legal requirements: to comply with laws, court orders, or lawful requests from government authorities, or to protect the rights and safety of us, our users, or the public.
• Business transfers: if the Service is transferred, personal information may be transferred with it. We will notify you in advance and require the recipient to continue to honor this policy.
• With your consent: in any other case, we will ask for your consent before sharing.

Our servers and those of our providers may be located in the United States, Singapore, mainland China, and other countries or regions, so your personal information may be processed outside the country or region where you live.

The providers we use are bound by data processing agreements. For personal information from the European Economic Area, the United Kingdom, and Switzerland, we rely on safeguards such as the EU Standard Contractual Clauses (SCCs) offered by those providers. Where applicable law requires your separate consent for a cross-border transfer, we will ask for it separately.

We protect your personal information with measures including:

• Encrypting all data in transit with TLS (HTTPS).
• Storing passwords only as argon2id hashes, keeping sign-in tokens in cookies that page scripts cannot read, and storing only hashes of refresh tokens on our servers.
• Keeping your uploaded photos, test kits and data downloads in private storage. Photos for Shopify product drafts are published only if you include drafts in a test kit, so that Shopify can fetch them, and are removed after 30 days.
• Strictly limiting personnel access to production data and the scope of their access permissions.

If a security incident may affect your personal information, we will notify affected users and, where required by law, the relevant authorities within 72 hours of discovering it, describing what happened, the likely impact, and the steps we have taken.

We retain personal information only for as long as necessary to fulfil the stated purposes:

• Account information: retained for the duration of your account, and deleted within 30 days after you request account deletion.
• Your content, Generated Content, and test histories (product photos, product cards, photos, videos, concept images, results, attestations, image fingerprints): retained for the duration of your account, and deleted within 30 days after you request account deletion.
• Style references: stored privately with the idea they were used for, retained for the duration of your account, and deleted within 30 days after you request account deletion.
• Test kit and data downloads: test kits are kept for 30 days and data downloads for 7 days, then removed; you can make them again from your account.
• Sign-in session records (IP address and browser information): retained for the duration of your account for security investigations, and deleted with your account.
• Billing records (plan, amount, and dates, without card numbers): retained for 5 years after your subscription ends to handle disputes and meet tax and accounting requirements.
• Communications: retained for 2 years after our last exchange.
• Server access logs: usually retained for no more than 30 days.
• Backups: deleted data is removed from backups as they rotate, usually within 30 days.

When a retention period ends, we delete or anonymize the information, unless a longer retention period is required by law.

Depending on the laws where you live (such as the Personal Information Protection Law of the People’s Republic of China, the EU General Data Protection Regulation, and the California Consumer Privacy Act), you may have the following rights:

• Access: to know how we process your personal information and to receive a copy of it.
• Correction: to correct inaccurate information. You can change your display name directly in Account.
• Deletion: to delete your account and personal information.
• Portability: to receive the personal information you provided to us in a commonly used electronic format.
• Restriction and objection: to restrict or object to processing based on our legitimate interests, including analytics.
• Withdrawal of consent: to withdraw consent you have given, without affecting the lawfulness of processing before the withdrawal.

You can download your data — your tests, photos, videos, ideas and billing history — in Account → Privacy and change analytics under Cookie settings. To exercise any other right, including deleting your account, send an email to support@museify.app from your registered email address. We will respond within 30 calendar days after verifying your identity. You also have the right to lodge a complaint with the data protection authority where you live.

We will not treat you differently for exercising any of these rights.

We do not currently send marketing emails. If we send marketing emails in the future, we will first obtain your consent, and every marketing email will include an unsubscribe link so you can opt out at any time.

Service notices, such as account verification, password resets, billing, and changes to our terms or this policy, are necessary to provide the Service and are not affected by unsubscribing.

The Service is intended for users aged 18 or older, and we do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, email support@museify.app and we will delete it promptly.

Do not upload product photos showing a child unless their parent or guardian has agreed. Such photos are handled as described in “People in your photos, and our AI models”; our AI models are adults, and we never make images of the child.

The Service may link to third-party websites and services, such as Google sign-in, the Waffo Pancake checkout page, and the platforms you sell and advertise on. This policy applies only to information we collect directly. Third parties handle data under their own privacy policies, and we are not responsible for their practices.

We may update this policy and will update the date and version number at the top of this page accordingly. We will notify you of material changes by email or in-product notice at least 14 days before they take effect.

For privacy questions, requests to exercise your rights, security incident reports, and customer support, email support@museify.app. Correspondence sent to this address is handled personally by the operator. We usually respond within 2 business days, and we respond to rights requests within 30 calendar days.

Operator: Jin Bojin (individual sole proprietor). Website: museify.app.