Last updated September 26, 2026
Privacy Policy
This policy explains what information Plotfun collects, why it is used, who receives it, how long it is kept, and the choices available to you. It applies to plotfun.com, the Plotfun workspace, and related services.
1. Who is responsible
Plotfun operates the services described here. For privacy questions or requests, contact [email protected]. If a service is offered by a separately identified legal entity, its identity will be shown in the applicable service or transaction notice.
2. Information we collect
- Account and identity information: your email address, display name, account identifier, authentication records, and information supplied by a sign-in provider such as Google.
- Content you provide: prompts, scripts, project data, uploaded images, video, audio, reference files, feedback, and messages to support. Generated results and associated settings are also stored in your account.
- Service and transaction information: model selections, generation jobs, credit balances and history, membership status, and purchase records if a paid purchase feature is made available.
- Technical information: IP address, device and browser details, timestamps, request and error logs, and security signals needed to operate and protect the service.
- Connected-service information: if you authorize an integration, we receive only the data made available through the permissions and actions shown by that provider. The data depends on the integration you choose.
3. How we use information
We use data for the purposes described here and in notices presented when a feature is used. A material new use, including a new use of private content for model training, requires an updated notice and any consent required by law.
- Create and secure accounts, authenticate users, and provide requested features.
- Store projects and media; process prompts and files with selected AI models; return and maintain generated results.
- Calculate, grant, deduct, and display credits; maintain records of transactions and resolve billing or service disputes.
- Diagnose errors, prevent abuse and fraud, enforce our rules, and improve reliability and accessibility.
- Respond to requests, send essential service notices, and meet legal obligations.
4. Legal bases where applicable
Depending on your location and the processing, we rely on performance of a contract to provide the service; legitimate interests in security, support, and service improvement; legal obligations; and consent where required, for example for optional technologies or a use you choose. You may withdraw consent without affecting earlier lawful processing.
5. Sharing and processors
We share information only as needed for the service: with identity providers, hosting and storage vendors, AI model and generation providers, payment processors if payments are enabled, support providers, and providers you connect. We may also disclose information when legally required, to protect users or the service, or in a business transfer subject to applicable safeguards. A model provider may receive the prompts and files needed for a generation request; its handling may be governed by its own terms and our arrangements with it. We do not make a blanket promise that every third-party model provider follows the same retention or training rules.
6. Retention and deletion
We keep account, project, and media information while needed to provide the service or until you delete it, subject to legal, security, and dispute-resolution needs. Media moved to the trash is scheduled for permanent deletion after 30 days, and you can permanently delete it earlier. A deleted generation-history entry does not by itself delete its media files. Temporary import files and diagnostic records can follow different operational periods. Residual copies may remain in backups for a limited period before being overwritten. Request account deletion or details about a specific record at [email protected].
7. International transfers and security
Service providers and infrastructure may process information in countries other than yours. Where required, we use an applicable transfer mechanism and safeguards. We use reasonable technical and organizational security measures, but no system can guarantee absolute security.
8. Your choices and rights
You may request access, correction, a copy, deletion, or restriction of personal data, and may object to certain processing or withdraw consent where applicable. Your rights and exceptions vary by location. You may complain to your local data-protection authority. We may verify your identity before fulfilling a request. See “Data Requests & Regional Rights” for how to contact us and additional regional information.
9. Children and sensitive content
The service is not directed to children. Do not submit another person’s sensitive information or private media unless you have an appropriate basis to do so. If you believe a child’s data was provided, contact us for review and deletion.
10. Changes and contact
We may update this policy as features and legal requirements change. The date at the top identifies the current version. For material changes, we will give notice through the service or another appropriate channel before they take effect when required. Contact [email protected] with questions.
Questions or requests: [email protected]