Privacy Policy

1. Introduction

Gobostock ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image and video generation platform (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (hashed), and profile details when you register
• Payment Information: Billing address and payment method details (processed securely by Stripe)
• Content and Prompts: Text prompts, images you upload for editing, content you create using our Service, and marketplace submissions (including files, titles, captions, tags, location or capture metadata, releases, and related listing materials)
• Communications: Messages you send to our support team or feedback you provide

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, generation history, and interaction patterns
• Device Information: Browser type, operating system, device identifiers, and IP address
• Cookies and Tracking: Session cookies, authentication tokens, and analytics data
• Log Data: Server logs including access times, error reports, and referring URLs

2.3 Information from Third Parties

• Social Login: If you sign in with Google or other providers, we receive your name, email, and profile picture
• Payment Processors: Transaction confirmations and fraud prevention data from Stripe or similar services
• Payout Partner: Status of identity, tax, and payout eligibility from Stripe Connect (Gobostock does not store bank account numbers or SSNs collected by Stripe)

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Service
• Process your transactions and manage your account
• Generate AI content based on your prompts and preferences
• Host, review, protect, license, package, and commercially distribute accepted marketplace assets under the Contributor Terms (licensing of creative works, not a sale of personal data)
• Send service-related communications (account updates, security alerts)
• Send marketing communications (with your consent, which you can withdraw anytime)
• Analyze usage patterns to improve user experience
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations
• Verify identity, prevent fraud, meet sanctions and tax-reporting duties, and send contributor cash-outs through our payout partner
• Train and improve our AI models (see Section 4)

4. AI Training and Your Content

Your prompts and generated content may be used to improve our Service. However:

• We do not sell your personal prompts or personal content to third parties as a personal-data product
• Content used for training is anonymized and aggregated
• You can opt out of having your prompts and generated content used for AI training by contacting us
• Images containing identifiable individuals will not be used for training without explicit consent

Marketplace licensing is separate from AI training. Accepted marketplace assets are processed and commercially distributed under the Contributor Terms (including licensing to buyers, packaging, previews, and Gobostock product use). That commercial grant is not a sale of personal data, and AI-training opt-out does not revoke marketplace rights after you accept those terms—delisting and survival rules in the Contributor Terms apply instead.

Third-party AI models (such as those from OpenAI, Google, Recraft, Black Forest Labs, ByteDance, and Sourceful) may have their own data policies. We recommend reviewing their terms for content processed through their APIs. Those provider terms also restrict how you may use generated outputs. You may not use Gobostock-generated or licensed files to train, fine-tune, or develop competing AI models. See the Terms of Use and Content License.

5. Information Sharing and Disclosure

We may share your information with:

5.1 Service Providers

Third-party vendors who assist with hosting, payment processing, analytics, customer support, and AI model providers. These providers are contractually obligated to protect your data. Buyer checkout and contributor cash-outs use Stripe. Stripe's privacy policy is available at stripe.com/privacy.

5.2 Payout and identity verification

If you request a cash-out, Stripe collects legal name, country, date of birth, government ID, tax identification number, and bank account details as required for identity verification, sanctions screening, tax reporting, and sending money. Gobostock does not store bank account numbers or Social Security numbers collected through Stripe Connect. Gobostock may store connected-account identifiers and status (for example, whether payouts are enabled and whether requirements are due). Tax and transaction records are retained about 7 years for legal and tax compliance, consistent with Section 7.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.5 With Your Consent

We may share information for other purposes with your explicit consent.

We do NOT sell your personal information to advertisers or data brokers.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt)
• Regular security audits and vulnerability assessments
• Access controls and authentication for internal systems
• Secure cloud infrastructure with reputable providers

7. Data Retention

We retain your information as follows:

• Account Data: Retained while your account is active and for 30 days after deletion request
• Private generated content: Stored while you have an active paid subscription, subject to fair-use limits. After a paid plan ends, unpublished generations may be deleted. We generally aim to keep them for up to 90 days if you had at least 60 days of paid history; shorter subscriptions may be deleted sooner (typically after 14 days). Marketplace listings follow the Contributor Terms
• Uploads: Stored against your plan's upload allowance. After cancel, uploads and Design Studio assets may be deleted after about 7 days if paid tenure was under 60 days, or after 30–90 days for longer-tenured accounts
• Transaction Records: Retained for 7 years for legal and tax compliance
• Server Logs: Typically retained for 90 days
• Analytics Data: Retained in anonymized form indefinitely

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing emails or opt out of AI training
• Restriction: Request that we limit processing of your data

To exercise these rights, contact us at contact@gobostock.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our Service

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers from the EEA/UK, to protect your data in accordance with this Privacy Policy.

11. Children's Privacy

Our Service is not intended for users under 13 years of age (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at contact@gobostock.com.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. Our legal bases for processing include consent, contract performance, legal obligations, and legitimate interests.

You have the right to lodge a complaint with your local data protection authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. For material changes, we may also send you an email notification.

Your continued use of the Service after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: