§01 — Data we collect
- Project requests: the name, contact and project details you send through the form on goragen.com. We use them only to reply and discuss your project. They are stored in our database and forwarded to our team's private Telegram chat.
- Account (if we set up studio access for you): email, hashed password, workspace name.
- Generations: prompts, engine choice, output URLs, Gemini scores, render duration.
- Operational: IP, user agent, request timestamps. 30 days max retention.
§02 — Data we do not collect
- We do not run third-party analytics. No Google Analytics, no Meta Pixel.
- We do not sell or share data with brokers. Period.
- We do not train foundation models on your prompts or outputs.
§03 — Where data lives
On our own servers and in Cloudflare R2 object storage. Traffic between your browser and goragen.com is encrypted with TLS.
§04 — Custom personas & uploaded footage
Footage you upload to train custom LoRAs is encrypted, accessible only to the training pipeline, and deleted within 14 days of training completion. The resulting LoRA weights are yours to keep on Agency tier.
§05 — Your rights
- Get a copy of your data: ask us through the contact form.
- Delete everything: /settings/danger — purges within 24h, except legal-hold material.
- EU/UK GDPR + UK DPA: write to us through the contact form (choose “Something else”). We respond within 7 days.
- California CCPA: same process.
§06 — Cookies
We use one (1) cookie: access_token for authenticated sessions, plus refresh_token. Both httpOnly + secure. No tracking cookies.
§07 — Contact
Privacy concerns: the contact form on goragen.com.
▸ DRAFT POLICY. QUESTIONS: USE THE CONTACT FORM.