Privacy Policy

Introduction

Metamorfiles ("we," "us," or "our") operates metamorfiles.com, a platform offering both free browser-based image tools and a professional Studio with AI-powered features. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

We are committed to protecting your privacy and complying with applicable data protection laws, including Brazil's Lei Geral de Proteção de Dados (LGPD). By using our services, you agree to the collection and use of information in accordance with this policy.

How We Handle Your Images

Metamorfiles offers two types of services with different privacy characteristics:

Information We Collect

Account Information

When you create an account through Clerk, we collect:

• Email address
• Name (if provided)
• Profile picture (if using social login)
• Account identifiers

Payment Information

Payment processing is handled by Stripe. We never store your credit card details. We retain:

• Subscription status and plan type
• Billing cycle dates
• Stripe customer ID
• Payment history and invoice records

Studio & AI Usage Data

When you use Studio Pro features, we store:

• Projects you save to the cloud (design data and images)
• AI-generated images and their associated prompts
• AI operation history (what models you used, when)
• Credit usage and transaction records

Analytics Data

We use PostHog for analytics to improve our services:

• Pages visited and features used
• Browser type and operating system
• General geographic location (country level)
• Referring website
• Session duration

AI Image Processing

When you use AI features (image generation, AI editing), your data is processed as follows:

What We Send to AI Providers

• For image generation: Your text prompt
• For image editing: Your text prompt plus the source image

AI Provider

We use Google Gemini for AI image generation and editing. Images and prompts sent to Gemini are processed according to Google's Privacy Policy.

How We Use Your Information

• Provide services: Enable account creation, cloud saves, and AI features
• Process payments: Manage subscriptions and billing
• Improve our platform: Analyze usage patterns to enhance features
• Communicate with you: Send service-related notifications and support responses
• Ensure security: Detect and prevent fraud and abuse
• Legal compliance: Meet applicable legal requirements

Data Storage

Your data is stored using Convex, a cloud database service based in the United States. This includes:

• User account information
• Subscription and credit data
• Saved projects (design data and images)
• AI-generated images
• AI prompts and generation history

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Third-Party Services

We use the following third-party services:

• Clerk: Authentication and user management
• Stripe: Payment processing
• Convex: Database and file storage
• Google Gemini: AI image generation and editing
• Vercel: Website hosting
• PostHog: Analytics

Each service has their own privacy policy governing how they handle your data.

Data Retention

• Account data: Retained while your account is active
• Projects and AI images: Retained until you delete them or close your account
• Payment records: Retained for 5 years for legal and tax compliance
• Analytics data: Aggregated and anonymized after 24 months

When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law.

Your Rights Under LGPD

Under Brazil's General Data Protection Law (LGPD), you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data
• Information: Know what data we collect and how we use it
• Consent withdrawal: Withdraw consent at any time
• Opposition: Object to processing in certain circumstances

To exercise these rights, contact us using the information below.

Cookies

We use cookies for:

• Essential: Authentication and security
• Analytics: Understanding how you use our service (PostHog)
• Preferences: Remembering your settings

You can disable cookies in your browser. Some features may not work properly without essential cookies.

Children's Privacy

Metamorfiles is not directed at children under 13. We do not knowingly collect personal information from children under 13.

AI features require users to be at least 18 years old or have parental consent, in accordance with our AI provider's terms.

International Transfers

Your information may be transferred to and processed in countries other than Brazil, including the United States, where our service providers are located. We ensure appropriate safeguards are in place to protect your data in accordance with LGPD requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, sending you a notification.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data protection rights:

Email: contact@metamorfiles.com

Metamorfiles is operated by a Brazilian entity subject to Brazilian law and the jurisdiction of Brazilian courts.