Privacy Policy

Information We Collect

Account information such as name, email, and billing details provided when you sign up for the service.

Images and media files you upload, including associated metadata (EXIF data, file properties, dimensions, format).

GPS coordinates and location metadata embedded in uploaded images. We use these coordinates to derive city, region, and country information (reverse geocoding) which is stored alongside your media and used for location-based search and analytics. If you do not want location data processed, remove GPS metadata from your images before uploading.

AI prompts, generation parameters, and preferences you provide when using image generation and editing features.

AI Chat conversation history, including messages you send and model responses, stored to provide conversational continuity. You can delete your chat history at any time.

Image editing operations, transformations, and processing history to provide service functionality.

Content and metadata you upload to the platform, including usage analytics captured to improve performance.

Support communications, survey responses, and product telemetry that help us enhance the experience.

How We Use Information

Deliver and maintain the platform, including authentication, data processing, and integrations you enable.

Process, store, edit, and transform your images according to your instructions and settings.

Generate AI images, process image editing requests, and respond to AI chat messages using third-party AI service providers including but not limited to OpenAI, Google, Fal.ai, and Replicate. The specific provider used depends on the model you select.

Analyze image content for safety, content moderation, and compliance with our Acceptable Use Policy.

Optimize image storage, delivery, and processing performance through format conversion and compression.

Send transactional emails such as registration confirmations, account notifications, and security alerts.

Send newsletters and product updates to users who have opted in. You can unsubscribe from marketing emails at any time via the unsubscribe link in any email or through your account settings.

Provide customer support and analyze usage trends to inform development.

Protect Media Moana and our customers from security threats, fraud, and abuse.

We do NOT use your uploaded images or AI-generated outputs to train AI models unless you explicitly opt-in to improvement programs.

How We Share Information

With vetted subprocessors that perform services on our behalf (e.g., cloud storage providers like AWS S3, infrastructure providers).

With third-party AI service providers (including but not limited to OpenAI, Google, Fal.ai, and Replicate) solely to process your prompts, generate or edit images, and respond to AI chat messages as you request. Your content is shared only with the provider powering the model you select.

With a reverse geocoding service to convert GPS coordinates from your uploaded images into human-readable location data (city, region, country). Coordinates are used solely for this purpose and are not stored by the geocoding service.

With image processing and CDN services to optimize and deliver your media files.

With your authorization when you connect third-party integrations or request data exports.

When required by law, regulation, or legal process, provided we notify you unless prohibited.

We maintain data processing agreements with all subprocessors to ensure your content is handled securely and confidentially.

Data Retention

We retain customer content (uploaded images, AI-generated images, and media files) for the duration of your subscription and delete it within 30 days of account termination unless instructed otherwise.

You can delete individual images and content at any time through the platform interface. Deleted items are moved to the Trash and can be recovered within 15 days. After 15 days, or when you permanently delete items from the Trash, content is removed and cannot be recovered.

AI Chat conversation history is retained for the lifetime of your account. You can delete individual conversations or your entire chat history at any time through the platform interface.

Image metadata, processing history, and AI generation prompts may be retained in anonymized form for up to 24 months for service improvement and analytics.

Operational logs and telemetry are retained for up to 24 months to support security investigations and performance tuning.

Cached or optimized versions of images stored on CDNs are purged within 7 days of deletion from your account.

When you publish a media item via a public URL, it becomes accessible to anyone with the link (unlisted — not indexed by search engines). When you unpublish or delete a published item, the public URL stops resolving within 24 hours as edge caches expire. You are solely responsible for any content you choose to make publicly accessible and for any consequences arising from sharing public URLs.

Security Measures

Media Moana encrypts data in transit (TLS 1.2+) and at rest (AES-256), enforces role-based access, and undergoes regular security testing.

Uploaded images and media files are stored securely on encrypted cloud storage with access controls and audit logging.

AI prompts and generation requests are transmitted securely to third-party providers and are not logged or stored by those providers longer than necessary to generate outputs.

You can sign in using third-party identity providers (Google, GitHub, Twitter) or via a magic link sent to your email. These providers handle their own authentication security, including any MFA they enforce.

We implement automated content scanning to detect and prevent storage of malware, illegal content, and policy violations.

International Transfers

We rely on Standard Contractual Clauses and other approved safeguards when transferring personal data outside of its origin region.

Your Rights

Depending on your jurisdiction, you may request access, correction, deletion, or restriction of your personal data.

Submit privacy requests via privacy@mediamoana.com.

Children's Privacy

Media Moana is not directed to children under 16 and we do not knowingly collect personal information from them.

If you believe a minor has provided us with personal data, please contact us so we can delete it promptly.

Updates to This Policy

We will post any changes to this Privacy Policy on this page and update the effective date.

Material updates will be communicated via email at least 30 days prior to taking effect.

Contact

For privacy inquiries, reach us at privacy@mediamoana.com.