This Privacy Policy explains how Liro (“Liro,” “we,” “us”) collects, uses, and protects your information when you use our AI photo studio at myliro.site and related services (the “Service”). By using the Service, you agree to this policy.
1. Information we collect
- Account information. When you sign in with Google, we receive your name, email address, profile photo, and a Google account identifier. We also record that you confirmed you are 18 or older.
- Your content. Photos and files you upload (for example, selfies, product photos, logos, or room photos), the text and choices you enter, and the images we create for you.
- Purchase information. For crypto payments: the package you chose, the amount, network, token, the public wallet address and transaction hash of your payment, and its status. We never ask for or store your wallet’s private keys or seed phrase.
- Usage and device data. Pages viewed, features used, generation history, approximate location derived from IP address, browser and device type, and error logs.
- Support messages. Anything you send us by email.
2. How we use your information
- To provide the Service: create the images you request, store your projects and files, and manage your credits.
- To process and verify payments and prevent fraud and abuse.
- To keep the Service secure, debug problems, and measure and improve features.
- To respond to support requests and send essential service messages.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not use your uploaded photos or created images to train our own AI models. We do not use your photos to identify you, and we don’t create biometric templates from them.
3. AI processing
To create an image, we send your uploads and instructions to third-party AI model providers that act on our behalf (for example, OpenAI and xAI image models, accessed through our AI provider). They process this content only to return results to us, under their API data terms, which do not permit using API inputs to train their models by default. Results are generated automatically and can be inaccurate.
4. Google user data
Liro’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only basic profile scopes (name, email, profile photo) and use them solely to create and secure your account. We do not access your Gmail, Drive, contacts, or any other Google data, and we do not transfer Google user data to third parties except as needed to provide the Service, to comply with law, or with your consent.
5. How we share information
- Service providers that host and run Liro: Vercel (hosting and file storage), Supabase (database), AI model providers (image generation), and Google (sign-in). They may only use your data to provide services to us.
- Public blockchains. Crypto payments are recorded on public networks by their nature; we don’t control that data.
- Legal reasons. If required by law, or to protect the rights, safety, and property of users, Liro, or others.
- Business transfers. If Liro is involved in a merger, acquisition, or sale of assets, subject to this policy.
- Shared links. If you create a share link for an image, anyone with the link can view that image.
6. Storage and retention
- Uploaded photos and created images stay in your account until you delete them or delete your account.
- When you delete a file or project, we remove it from your account right away and from our storage and backups within 30 days.
- When you delete your account, we delete your profile, uploads, images, and projects within 30 days. We keep minimal payment and credit records for up to 7 years where needed for accounting, tax, fraud prevention, or legal reasons.
- Usage logs are kept for up to 12 months.
Our database and file storage are run by providers located in the United States and the European Union. By using the Service, you understand your data may be processed in those locations.
7. Security
We use encryption in transit (HTTPS), access controls, and secure secret management. Sign-in is handled by Google; we don’t store passwords. No system is perfectly secure, so please keep your Google account secure.
8. Your choices and rights
- Delete any file or project at any time from your account.
- Request a copy of your data, a correction, or deletion of your account by emailing myliro.studio@gmail.com from the email address on your account. We respond within 30 days.
- You can revoke Liro’s access to your Google account at any time in your Google Account settings.
- Depending on where you live (for example, California or the EU/UK), you may have additional rights to access, delete, correct, or port your data and to object to certain processing. We honor these requests as required by law and will not discriminate against you for exercising them.
9. Age
Liro is only for people 18 and older. We don’t knowingly collect information from anyone under 18. If you believe a minor has used Liro, contact us and we’ll delete the account.
10. Photos of other people
Only upload photos of yourself or of people who have given you permission. If someone uploaded a photo of you without consent, email us and we’ll review and remove it.
11. Changes
We may update this policy. If we make material changes, we’ll update the date above and notify you in the app or by email before they take effect.