Privacy notice

Scope and responsibility

Mazee.ai operates this service. Contact support@mazee.ai for privacy, service and refund requests. Creem handles private merchant verification.

Policies effective from 5 November 2026. Availability is shown before purchase or generation.

Information we process

Account information includes your email, display name, private biography, time zone, notification preferences, sign-in provider identifiers and session records. Email sign-in also processes verification requests and codes; do not send codes or credentials to support.

Creative services process prompts, selected models and settings, uploaded references, generated files, task status and error records, credit reservations and settlement history. Support processes your message, attachments and the account or task details needed to investigate it. Avoid submitting sensitive personal information or other people’s private information.

We use the country or territory detected for your connection, and the subdivision where needed, to check which models are available. We record the region, time and applicable policy versions. You do not need to enter a location.

When checkout is available, Creem processes payment and tax information. Our order records contain product, amount, currency, payment status and provider identifiers; this site does not request or store complete payment-card numbers.

Purposes and legal grounds

We use account and task data to provide requested services, maintain sessions, deliver results and support, and reconcile credits and orders. Where applicable, the legal grounds are steps requested before a contract and performance of that contract. Essential cookies are needed for authentication and security.

We use limited security, moderation, access and audit records to prevent abuse, enforce service restrictions, investigate failures and protect accounts. Where applicable, this relies on legitimate interests balanced against individual rights, or a legal obligation. Records required for accounting, disputes or lawful requests may be kept to meet those obligations.

Optional analytics requires separate consent. Refusing or withdrawing consent does not restrict account, support or image generation.

Recipients and processing locations

Resend stores email content and delivery records in the United States. Choosing an email sending region does not change that storage location. Its data processing addendum forms part of the service terms.

Cloudflare Workers hosts the deployed website, with D1 storing account, order and task records and private R2 storing uploaded and generated files. Resend delivers email sign-in codes. Google processes a sign-in request only when you choose Google. Feishu processes email support messages and attachments; email and on-site tickets are separate.

Prompt screening sends the prompt and a pseudonymous request identifier to Creem, without your email or payment details. A dispatched Kie task sends the prompt, model settings and selected reference to Kie and its model-service chain. GPU processing depends on the selected model and service availability. We do not send a generation request merely because you open a policy page.

Processing may occur in the United States, Europe and China. Customer region restrictions do not guarantee data residency. Contact support for applicable provider and transfer information.

We do not sell submitted content or operate advertising profiling in this implementation. Mazee.ai does not use your private creations to train its own models. This is not a promise that every model provider offers zero retention or excludes training: provider-specific retention, training and commercial-use conditions must be checked before that model is opened.

Kie states that generated files are retained for 14 days and text or metadata logs for two months. These are Kie’s published periods, not a promise about every upstream model, reference input, backup or deletion request. Do not submit sensitive personal data.

Retention and deletion

Reference access expires after seven days, but expiry and the existing cleanup mark do not guarantee physical deletion from storage. Trash shows a 30-day preview period; permanent deletion is currently disabled. Neither period is an automatic personal-data deletion deadline.

Planned retention: necessary account data while the account is active; account-erasure requests reviewed with a 30-day internal target; resolved support tickets for 180 days; ordinary logs for 30 days; necessary security, audit and superseded admission records for 180 days; our managed backups on a 30-day rolling basis. These targets are not yet automatic deletion guarantees. Required accounting, legal and dispute records may need longer retention. Provider copies have separate rules; applicable statutory deadlines take priority.

A support request can begin a manual account or data review. Moving a work to Trash, withdrawing analytics or withdrawing a service declaration does not delete your account, erase historical records, cancel subscriptions or confirm completion of a data request.

When enabled, complimentary image-review access is approved for a specific signed-in account. We record the invitation, approving operator, expiry and task attempts for access control and cost reconciliation. It creates no payment order or subscription. Revocation stops new work; existing task records and private results retain their normal recovery and storage rules.

Cookies and local drafts

Sign-in uses session cookies. The language cookie remembers your choice for one year. Creative drafts and recovery receipts can be stored in this browser. They do not automatically synchronize across devices. Clearing browser storage can remove local recovery information without canceling a submitted task.

With your consent, Google Analytics measures public page visits and basic account, generation and checkout outcomes. Private page URLs are excluded. We send fixed event categories, product IDs and confirmed purchase or full-refund amounts with a random analytics transaction ID. We do not send prompts, files, account IDs, internal order IDs, email addresses, URL queries or referrers. Google also processes IP and browser/device information.

Your choice and analytics cookies last up to 180 days in this browser. Cookie settings lets you withdraw consent, stop future tracking and remove accessible analytics cookies. Previously sent data is not erased. Essential storage still works. Advertising personalization and Google signals are disabled.

Google Analytics runs only after consent. Current configured retention is two months for event data and fourteen months for user data; browser consent lasts 180 days.

Your choices and privacy requests

Depending on applicable law, you may request access, correction, erasure, restriction, portability or an objection to certain processing, and withdraw consent without affecting earlier lawful processing. You may also complain to the competent data-protection authority. Some records may need to be retained for legal obligations or claims.

Use support@mazee.ai or the on-site privacy request form. Tell us the request type and relevant account or task; do not email passwords, verification codes or identity documents. We may ask for proportionate account verification through a safe channel. A ticket acknowledges a request for review, not confirmation that deletion is complete. Applicable statutory response periods take priority.

The creative service is restricted to people aged at least 18 who also meet the legal contracting age and capacity in their location. If you believe a child has submitted personal information, contact support so it can be investigated. Safeguards reduce risk but do not guarantee that all misuse or unauthorized access can be prevented.

Updates and effective date

Effective from 5 November 2026. Material changes receive a new version and, where required, fresh confirmation before new work.