Privacy Policy
Effective date: May 18, 2026
1. Introduction
abgkol ("we", "us", "our") operates the website abgkol.com and the abgkol platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Information You Provide
- Account data — name, email address, and authentication credentials (via email/password or Google OAuth)
- Payment data — billing information processed securely by our payment provider Polar; we do not store credit card numbers
- Content data — images, prompts, character configurations, and other content you create or upload
- Communications — messages you send to our support team
2.2 Information Collected Automatically
- Device and browser data — IP address, browser type, operating system, device identifiers
- Usage data — pages visited, features used, credit consumption, generation history, timestamps
- Cookies and similar technologies — session tokens, authentication cookies, and analytics identifiers
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process transactions and manage your subscription
- Generate AI content based on your inputs and configurations
- Improve and personalize your experience through analytics and feature development
- Communicate with you about your account, updates, and support requests
- Detect, prevent, and address fraud, abuse, or technical issues
- Comply with legal obligations
4. Third-Party Service Providers
We share data with trusted third-party providers who assist in operating the Service. Each provider processes data only for the purposes described below:
| Provider | Purpose | Data Processed |
|---|---|---|
| Supabase | Authentication & database | Account data, session tokens |
| Cloudflare | CDN, R2 storage, security | Media files, IP addresses |
| AI Providers | Image & video generation | Prompts, reference images (not stored by providers) |
| Polar | Payment processing | Billing & transaction data |
| PostHog | Product analytics | Anonymized usage events, device info |
| Vercel | Hosting & deployment | Request logs, IP addresses |
We do not sell your personal data to any third party.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Generated content (images, videos) is stored until you delete it or your account is terminated.
Upon account deletion, we remove your personal data within 30 days, except where retention is required by applicable law or for legitimate business purposes (e.g., fraud prevention, legal compliance).
6. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Secure authentication with hashed credentials
- Access controls and least-privilege principles
- Regular security reviews and monitoring
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Cookies and Tracking
We use the following types of cookies:
- Essential cookies — required for authentication, session management, and core functionality
- Analytics cookies — used via PostHog (reverse-proxied through our domain) to understand usage patterns and improve the product
You can disable non-essential cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your personal data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdrawal of consent — withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at support@abgkol.com. We will respond within 30 days.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. Our service providers operate globally, and we ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes via email or a prominent notice on the Service. Your continued use after such notification constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: support@abgkol.com
- Website: abgkol.com