Privacy Policy

Account data. Email, brand name, hashed password (or Google identity if you sign in with Google), and basic account metadata.

Uploaded content. Product photos, model references, and bespoke intake files you upload while using DIP. Stored in our backend so the engine can analyse them and so you can return to your work.

Generated outputs. Lock Sheets, compiled prompts, and storyboards generated for you.

Usage telemetry. Which actions you ran, token burn, and error logs — used for billing accuracy and to fix bugs.

Command Center runs client-side on your device. We do not store your AIV (image/video provider) API keys, your local bundle library, or the images you generate from your own AIV runs.

We do not sell your data or share it with advertisers.

We use a small set of trusted infrastructure providers to run the service:

• Lovable Cloud (Supabase) — database, authentication, file storage.
• Lovable AI Gateway — routes vision and text-model calls for Lock Sheet analysis and prompt compilation.
• Cloudflare — application hosting and DDoS protection.
• Stripe or equivalent payment processor — when you make a payment, billing data is handled by them; we receive only the result.

These providers act on our instructions and are bound by their own privacy commitments.

We use local storage to keep you signed in, to remember your DIP wizard progress, and to remember your language preference. We do not use third-party advertising cookies.

You can:

• Access the personal data we hold about you.
• Correct inaccurate data from your account settings.
• Delete your account and associated content by emailing us at hello@midastudio.app.
• Export your Lock Sheets and storyboards on request.

If you are in the EU/UK, you also have rights under GDPR including the right to lodge a complaint with your local data protection authority.

We retain account data and uploaded content while your account is active. When you delete your account we remove your data within 30 days, except where we are required to retain billing records by law (typically up to 7 years).

Midas Studio is not intended for users under 18 and not intended to generate imagery of minors. See our Acceptable Use Policy.

We use TLS in transit, encryption at rest, scoped database access (Row Level Security), and never expose admin credentials to the browser. No system is unbreakable; if we become aware of a breach affecting you, we will notify you without undue delay.

Privacy questions or data requests: hello@midastudio.app.