Privacy Policy
What fibo2.org collects when you generate or edit images with FIBO 2, why, who processes it and how to delete it.
The short version
- We collect what we need to run your account, make your images and bill you. Nothing more.
- Your uploads and results are private to you. We do not sell your data and we do not use your photos to train AI models.
- You can delete any image, or your whole account, at any time.
The rest of this page explains the details. "We" and "us" means fibo2.org.
What we collect
When you create an account Name, email address and, if you sign in with Google, your Google profile picture. Passwords are stored as one-way hashes.
When you make images The prompts you write, the photos you upload, the settings you choose (mode and aspect ratio) and the images the Service returns.
When you pay Your plan, purchases, invoices and subscription status. Card details go directly to Stripe and never reach our servers.
When you browse Pages visited, referring site or campaign, approximate country, device and browser type. See the Cookie Policy for the cookies involved.
When you write to us Your message and email address, so we can answer.
Why we use it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Generate, store and show your images | Prompts, uploads, results | Performing our contract with you |
| Account login and security, abuse prevention | Account data, device data | Contract and legitimate interest |
| Billing, credits and receipts | Payment data | Contract and legal obligation |
| Service emails (verification, password reset, receipts) | Email address | Contract |
| Improving the product | Aggregated usage data | Legitimate interest |
| Newsletter, only if you subscribe | Email address | Consent, withdraw anytime |
How images are processed
To create an image, your prompt and any photos you upload are sent to the AI infrastructure provider that runs the FIBO 2 model for us. If that provider is unavailable, the job may be completed by a backup AI provider under the same terms. These providers process the data only to return your image and do not use it to train models under our agreements with them. Generated images are passed through a safety filter before they are shown to you.
Who else handles your data
We share data only with providers that help us run fibo2.org, under contracts that limit their use of it:
- Cloudflare: hosting, database, file storage and security.
- AI infrastructure providers: running the image model, as described above.
- Stripe: payments, invoices and subscription management.
- Email provider: sending account and support emails.
- Analytics provider: privacy-friendly, aggregated visitor statistics.
- Google: only if you choose Google sign in.
We may also disclose data when the law requires it, to protect people's safety, or as part of a merger or sale of the Service, in which case this policy continues to apply.
Where data is stored
Our providers may process data outside your country, including in the United States. Where required, transfers rely on safeguards such as the EU Standard Contractual Clauses.
How long we keep it
- Images and uploads: until you delete them or your account.
- Account data: for as long as your account exists.
- Payment records: as long as tax and accounting law requires, usually up to 7 years.
- Server logs: a short period, typically up to 30 days, for security and debugging.
When you delete your account, we delete your profile, prompts, uploads and images. Backups roll over within 30 days.
Your choices and rights
You can view and edit your profile in settings, delete images from History, and delete your account from settings. You may also ask us to access, correct, export, restrict or erase your data, or object to processing, by emailing support@fibo2.org. Depending on where you live, laws such as the GDPR, UK GDPR or CCPA give you these rights, and you can complain to your local data protection authority. We do not sell or share personal information for cross-context advertising.
Children
fibo2.org is not for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
Security
Data is encrypted in transit, files are stored privately and served only to their owner, and access to production systems is limited. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
Changes
We will post updates on this page and change the date at the top. For significant changes we will also email you.
Contact
Privacy questions or requests: support@fibo2.org