Privacy Policy

1. Information We Collect

1.1 Personal Data You Provide

When you create an account or use Girl Generator, we may ask for certain personally identifiable information. This can include:

• Contact Information: e.g., your name, email address, username, and account credentials.
• Profile Details: if you create a profile, any avatar or bio you provide.
• Payment Information: if you purchase a subscription, payment details (e.g., card data, billing address) are collected by our third-party payment processor for billing. We do not store full payment card numbers on our servers.
• Identity Verification Data: if you participate in payouts, revenue sharing, or other commercial programs, we (or our payment partner BagelPay) may collect additional information such as date of birth, government-issued identification, tax forms, or proof of address to satisfy KYC/AML and tax reporting obligations.
• Content You Provide: any text prompts, images, or other media you upload or generate using the Service (e.g., a reference image you upload to process your request).

1.2 Data We Collect Automatically

We also collect certain information automatically when you use our Service, including:

• Usage Data: details of how you use Girl Generator (features used, generations, clicks/pages viewed, frequency/duration of use).
• Device and Technical Data: device type, OS, browser, IP address and general location (country/region), device identifiers, and crash/error logs (to ensure compatibility and troubleshooting).
• Cookies & Similar Tracking: we use cookies and similar technologies to remember preferences and analyze usage. For example, cookies help keep you logged in and track aggregate usage metrics (e.g., total visitors). You can set your browser to refuse non-essential cookies; some features may not function properly without them. See our Cookie Notice for details.
• Third-Party Analytics: we use analytics services (e.g., Google Analytics) that may set their own cookies to collect aggregate usage data. We do not permit these third parties to use such data for their own marketing.

1.3 Information from Third-Party Accounts

If you sign up or log in via a third-party platform (e.g., Google, Apple), we receive information from that account (e.g., name and email) as authorized by you. We use it to create or log in to your Girl Generator account. We do not collect your third-party passwords. You may unlink the third-party account at any time via our settings or the third-party's settings.

1.4 Children's Privacy

Girl Generator is not intended for individuals under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal data from a person under 18, we will delete that information. If you believe this occurred, please contact us at support@girlgenerator.net.

2. How We Use Your Information

We use the collected information for the following purposes in accordance with applicable laws:

• Provide and Maintain the Service: We process your personal data to create your account, enable image generation features, and operate the Girl Generator platform. For example, we process your prompts and images to generate outputs per your requests, and use your account data to save creations in your gallery.
• Improve and Develop the Service (Training Policy): We do not use your prompts or generated content to train or improve public models unless you explicitly opt in. We may analyze de-identified, aggregated usage metrics and system logs to improve reliability, performance, and safety. We also process content as necessary to provide the Service (e.g., moderation, abuse prevention). You can manage any opt-in settings (if offered) in your account.
• Communicate with You: We use contact information (email) to send service-related communications: confirmations, technical or security alerts, and updates about new features. We may also send marketing/promotional emails if you opt-in, such as newsletters or special offers related to Girl Generator. You can unsubscribe from marketing emails at any time.
• Customer Support: If you contact us for help, we will use your information (including any contact info and support history) to assist you and resolve issues.
• Legal Compliance and Security: We may process personal data as required to comply with applicable laws, regulations, legal processes or enforceable governmental requests. This includes verifying that users meet our 18+ age requirement, conducting KYC/AML checks for payout programs, collecting tax information, and screening for sanctions or fraud. We also use data to prevent misuse of our Service and enforce our Terms of Service—for example, monitoring generation activity for disallowed content.
• Personalization: To the extent permitted, we may use data like your past usage and preferences to personalize your experience. For example, we might suggest content or new features you may be interested in based on your usage trends.

We will ask for your consent before using your personal data for any purpose that is not covered by the above and required by law.

3. How We Share and Disclose Information

We treat your personal information with care and do not sell your personal data to third parties. However, we may share information in the following situations, always pursuant to appropriate safeguards:

• Service Providers: We share necessary personal data with trusted third-party vendors who perform services on our behalf, such as: cloud hosting providers (to store and process data), payment processors like BagelPay (to handle billing, subscription renewals, disputes, KYC/AML screening, and tax reporting), email service providers (to send communications), analytics providers (to analyze usage), and customer support tools. These service providers are bound by contracts to only use your data for our specified purposes and to protect it.
• Affiliates: We may share data with our corporate affiliates (companies under common ownership) if necessary to operate the Service or provide support, in accordance with this Policy.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose data if we determine in good faith that such disclosure is necessary to investigate or protect against illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or violations of our Terms of Service.
• Business Transfers: If Girl Generator is involved in a merger, acquisition, bankruptcy or sale of assets, your information may be transferred to the successor or affiliate as part of that transaction. We will ensure the recipient is bound by similar privacy obligations. You will be notified via email and/or a prominent notice on our site of any change in ownership or uses of your personal information.
• With Consent: We will share your personal data with others for any other purpose only with your consent. For instance, if we ever want to publish your story or showcase specific creations with identifying information, we would ask for your permission.
• Public Content: Note that any content you choose to make public on Girl Generator (e.g., posting an image in a public gallery or community) can be seen by all users and may be accessible to anyone on the internet. Your profile name, avatar, and shared creations are by default public to other users of the Service. Please do not include personal data in content you make public. We are not responsible for how other users may use information you make available to the public.

4. International Data Transfers

Girl Generator is a global service. The data we collect from you may be transferred to and stored on servers in countries outside of your own, including in the United States, the European Union, and Singapore, depending on where our infrastructure or service providers are located. We take steps to ensure lawful transfer of personal data across borders in compliance with GDPR and other laws. For example, when we transfer EU users' data to countries not deemed "adequate" by the EU, we rely on Standard Contractual Clauses (SCCs) or other approved legal mechanisms to safeguard your information.

Regardless of where your data is processed, we apply the same high standards of privacy protection. However, different countries may have different data protection laws. By using our Service, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this Policy.

5. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law. This means:

• Account information is kept until you delete your account or as needed to provide services. If you delete your account, we will delete or anonymize personal data within a reasonable period, except as noted below.
• Generated content (images, prompts): If you delete specific images or other content from your account, we will remove them from public view and our active databases. Residual copies may persist in backups for a short period but will be purged in the normal backup cycle.
• Usage logs and analytics data are generally retained for a shorter period for internal analysis. If this data is used for strengthening security or improving functionality, we may retain it longer. We may also retain data as needed to comply with legal obligations or to resolve disputes. For example, payment records may be retained for the duration required by financial regulations or tax laws.

Where identity verification is required, we retain KYC/AML documentation only as long as necessary to satisfy legal obligations imposed by financial regulators, tax authorities, or our payment partners, after which it is securely deleted or anonymized.

When we have no ongoing legitimate need to process your personal information, we will either delete or anonymize it. If deletion is not immediately feasible (e.g., because the data is stored in backups), we will securely store it and isolate it from further use until deletion is possible.

6. Your Rights and Choices

6.1 Access and Correction

You have the right to request access to the personal data we hold about you and to request corrections of any inaccuracies. You can review and update much of your account information by logging into your account settings. For any data not editable through the platform, you may contact us to exercise your access right. We will provide a copy of your data in a commonly used format on request (subject to some exceptions under law). If any personal data is inaccurate or incomplete, you may request to have it corrected.

6.2 Deletion of Data

You have the right to deletion/erasure of your personal data in certain circumstances. You may delete your account at any time via the account settings or by contacting support, and we will remove your personal information (except data we are required to retain for legal compliance). You may also request deletion of specific content or data. For example, if you want us to remove images you generated, you can delete them in your account or ask us to do so. We will honor verifiable deletion requests within the timeframes required by law. Note: once deleted, your data (including images and account info) cannot be recovered, so proceed with caution.

6.3 Withdrawal of Consent

Where we rely on your consent to process data, you have the right to withdraw that consent at any time. For instance, you can opt-out of marketing emails by clicking "unsubscribe" in the email. If you previously consented to our use of your content for promotional purposes and change your mind, contact us to withdraw consent. Note that withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6.4 Objection and Restriction

You may have the right to object to certain processing (such as for direct marketing or where we rely on legitimate interests) and to request that we restrict processing of your data. For example, EU users have the right to object to processing based on legitimate interests or for profiling. We will evaluate requests and comply where required by law.

6.5 Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible (applicable for data you provided under consent or contract). We can provide export of your account data (e.g. your images, prompts, profile info) upon request.

6.6 California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and disclose, the right to request deletion of your personal data, and the right to opt-out of any "sale" of personal information. However, we do not sell your personal data to third parties for monetary value. We also will not discriminate against you for exercising any CCPA rights. California users can exercise their rights by contacting us as described below. We will need to verify your identity and request before fulfilling CCPA requests (e.g., via your account login or other identification method).

6.7 Exercising Your Rights

To exercise any of your data subject rights, please contact us at support@girlgenerator.net (or use our webform, if available). Please clarify which right you seek to exercise and provide enough information for us to verify your identity (e.g., the email associated with your Girl Generator account). We will respond within timelines required by applicable law (typically 30 days for GDPR and 45 days for CCPA, with extensions if necessary).

6.8 Automated Decision-Making

Girl Generator's core service involves automated processing to generate images based on your prompts. However, we do not make any legally significant decisions about individuals solely by automated means. If this changes, we will inform you and ensure compliance with applicable laws regarding automated decision-making.

7. Security Measures

We employ appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, secure server infrastructure, access controls, and regular security assessments. For example, our website is served over HTTPS to secure data in transit, and sensitive information (like passwords) is stored in encrypted form.

However, no method of transmission or storage is 100% secure. You should also do your part—keep your credentials confidential and use a strong, unique password. If you believe your account has been compromised, please change your password immediately and contact support. We recommend enabling any available security features (like two-factor authentication, if offered) to help protect your account.

In the event of a data breach that affects your personal data, we will notify you and the appropriate authorities as required by law.

8. Content Moderation and AI Ethics

Girl Generator is committed to maintaining a safe and positive platform. We use automated filters and human review (as needed) to moderate content generated or uploaded to the Service, in line with our Acceptable Use Policy (see Terms of Service). We do not want our Service used to create illicit or harmful images. As such, you must not input any unlawful or highly sensitive personal data into the AI—for example, photos of others without permission, government ID numbers, or anything involving minors in inappropriate settings. Our systems may block certain prompts or images that violate our content guidelines (e.g., sexually explicit content involving minors, hateful symbols, etc.). See the Terms of Service for more details on prohibited content.

We also caution that AI-generated imagery is not guaranteed to be accurate or realistic. Images may contain artifacts or unexpected results. Use the outputs responsibly and refer to our Terms for usage restrictions (e.g., do not use generated images to spread false information or defame someone).

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email (sent to the address registered with your account) or by posting a prominent notice on our site. We indicate the effective date at the top of the policy. Your continued use of the Service after any changes constitutes your acceptance of the updated terms.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: support@girlgenerator.net
Address: Girl Generator Privacy Team, Room 1203, Tower B, Shenzhen Bay Innovation Center, 3331 Keyuan South Road, Nanshan District, Shenzhen, Guangdong 518054, China

We will be happy to assist you and will respond as soon as possible. For EU users, you also have the right to lodge a complaint with your local Data Protection Authority or the lead supervisory authority (in the EU) if you believe we have infringed your privacy rights.

Thank you for reading our Privacy Policy. Your privacy is important to us, and we are dedicated to safeguarding it as you unleash your creativity with Girl Generator!