Privacy Policy
Effective Date & Last Updated: October 18, 2026
At IBCreator Studio ("we", "our", or "us"), accessible from https://ibcreator.app, we take your privacy and data security seriously. This Privacy Policy describes how we collect, use, store, and protect your information when you access our AI persona generation platform, cloud video rendering studio, and related services.
Zero Secret Storage
We never store payment card details on our servers. All transactions are handled securely by Stripe with PCI Level 1 compliance.
Private Persona Vaults
Uploaded reference images are isolated to your user account and strictly used to guide your own AI model renders.
Isolated Cloud Infra
Data is hosted within Google Cloud Platform (Firestore & Cloud Run) with enterprise encryption at rest and in transit.
1. Information We Collect
We collect only the minimum information necessary to provide you with high-quality AI creation services:
- Account & Profile Information: When you sign in with Google OAuth, we receive your basic Google profile information (your Google User ID, verified email address, full name, and avatar image URL).
- Uploaded Reference Photos: Photographs and reference shots you upload into your Persona Vault. These images are stored securely to generate consistent identity character turnarounds and photoshoot variations.
- Generated Media & Metadata: Prompts, creative briefs, aspect ratios, rendered photos, and Veo video clips generated by our backend.
- Google Drive Integration (Optional): If you choose to connect your Google Drive to export photos directly, we receive an authorized OAuth token scoped strictly to uploading files into the folder you designate.
- Payment & Transaction Data: When purchasing credit packs or subscriptions, payment processing is handled directly by Stripe. We receive confirmation of completed transactions, credit balances, customer identifiers, and subscription statuses. We never store credit card numbers or CVVs.
2. How We Use Your Information
Your data is used strictly for the following operational purposes:
- To provide, operate, and maintain IBCreator Studio features.
- To generate photorealistic AI imagery and cinematic video clips using Google Cloud Vertex AI infrastructure.
- To maintain your persistent Persona Vault across sessions and devices.
- To credit your account, manage subscriptions, and process transactions through Stripe.
- To send you transactional notifications (e.g., render completion alerts, payment receipts, security notices).
- To detect and prevent fraudulent usage, abuse, and violation of our Terms of Service.
3. Google User Data & OAuth Disclosures
Google API Services User Data Policy Compliance:
IBCreator's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not use Google user data to develop, train, or improve generalized AI/ML models.
- We do not transfer or disclose Google user data to third parties, except as required to fulfill user-requested exports or comply with applicable law.
- When you connect Google Drive, access is strictly limited to uploading files into the folder you explicitly choose. IBCreator does not read, modify, or delete your existing private Google Drive documents.
4. Third-Party Sub-processors
We work with trusted enterprise service providers to operate our cloud infrastructure:
- Google Cloud Platform (GCP): Hosting (Cloud Run), secure database storage (Google Cloud Firestore Native Mode), and AI inference (Vertex AI Imagen 3 & Veo 3.1). Region: European Union (europe-west1).
- Stripe, Inc.: Secure merchant payment processing, billing portal, and fraud prevention.
- Cloudflare, Inc.: DNS, SSL/TLS transport encryption, and DDoS mitigation.
5. Data Retention & Deletion
You maintain full control over your media. You can delete individual photos, batches, videos, or entire Persona Vaults at any time directly through the studio interface.
When you delete an item, it is permanently purged from our Google Cloud Firestore database and Cloud Storage buckets. If you wish to delete your entire account and associated data, you can email us at support@ibcreator.app and all personal records will be eradicated within 72 hours.
6. Your Rights (GDPR & Global Standards)
Under applicable privacy laws (including GDPR and CCPA), you are entitled to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete information.
- Request complete erasure ("Right to be Forgotten") of your account and uploaded reference photos.
- Request an export of your generated photos and video clips in ZIP format.
- Withdraw your consent at any time (e.g. disconnecting Google Drive or revoking session access).
7. Contact & Inquiries
If you have any questions about this Privacy Policy, your rights, or data practices, please contact our Data Controller at: