Privacy Policy

Last updated: April 1, 2026

This Privacy Policy describes how Pictura API ("we," "us," or "our") collects, uses, and protects your information when you use our AI model aggregation platform and API service ("Service").

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and a hashed version of your password. We generate and store a hashed API key for authentication.

Usage Data: We collect information about your API usage, including request timestamps, models used, credit consumption, and basic request metadata (excluding prompt content and generated outputs).

Payment Information: Payment processing is handled by Stripe. We do not directly store credit card numbers or banking details. We receive transaction confirmations and purchase amounts from Stripe.

Technical Data: We may collect IP addresses, browser type, and device information from interactions with our dashboard and API endpoints for security and operational purposes.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and authorize API access
• Process credit purchases and manage your billing
• Monitor usage patterns for abuse prevention and capacity planning
• Communicate with you about your account, service updates, and security notices
• Comply with legal obligations

3. Data Storage and Security

We employ industry-standard security measures to protect your data:

• All API communication is encrypted using TLS/HTTPS
• Passwords are cryptographically hashed before storage
• API keys are hashed and cannot be retrieved in plaintext after initial generation
• The Service runs on Cloudflare Workers, which provides edge security, DDoS protection, and encrypted data handling
• We do not store your prompts, inputs, or AI-generated outputs beyond the duration of the API request

While we implement strong security practices, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services:

• Cloudflare: Infrastructure, edge computing, and security
• Stripe: Payment processing. Stripe's handling of your payment data is governed by their Privacy Policy
• Workers AI: AI model inference (prompts are processed but not stored by the provider beyond the request lifecycle)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cookies

Our dashboard uses browser localStorage to maintain your authentication session (JWT token and API key). We do not use tracking cookies or third-party analytics cookies. No advertising identifiers or cross-site tracking is employed.

6. Data Retention

We retain your account information for as long as your account is active. Usage logs are retained for up to 90 days for operational purposes. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Export your account data in a portable format
• Object to processing of your data for certain purposes
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at support@pictura-api.com. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

10. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@pictura-api.com