Privacy Policy

This Privacy Policy applies to Gasimus websites, apps, billing flows, public website publishing features, support interactions, and related services that link to this policy.

We may collect the following categories of information:

• Account and profile information, such as your name, email address, avatar, password hash for password-based sign-in, profile details, and connected authentication accounts.
• Workspace and generation data, such as prompts, uploads, reference images, generated images and videos, agent conversations, website chats, attachments, published website files, project metadata, and credit usage.
• Billing and transaction information, such as your selected plan, billing cycle, customer mobile number, invoice records, payment status, transaction IDs, and processor response metadata.
• Device, log, and usage information, such as IP address, browser type, operating system, timestamps, referring URLs, request logs, feature usage, and approximate diagnostic data collected by us or our infrastructure providers.
• Cookies, session data, and local storage data used for login, security, settings, and service performance.

We use information to:

• create and manage accounts;
• authenticate users and protect account security;
• operate image, video, website, and agent workflows;
• store projects, assets, and published website outputs;
• calculate and deduct credits, fulfill plan purchases, and reconcile billing;
• send invoices, account notices, product updates, and support replies;
• monitor reliability, prevent abuse, investigate fraud, and enforce our terms; and
• improve features, model routing, performance, and user experience.

To operate Gasimus, we may send prompts, attachments, reference media, and related generation instructions to third-party providers that power features on the platform. Depending on the workflow, this may include providers such as OpenAI, FAL, Together AI, and similar AI or infrastructure vendors we use to deliver the requested output.

We may also share relevant information with payment processors such as Polar, Mayar, or Midtrans, email delivery providers such as Resend, authentication providers such as Google, and hosting, storage, CDN, analytics, fraud-prevention, or security providers that help us deliver and protect the service.

We do not intentionally store your full payment card or banking credentials on Gasimus. That information is generally handled by the payment processor you use during checkout.

If you publish a website, share a public link, or choose public-facing profile or output settings, the relevant content may become accessible to other people on the internet. Publicly shared content should be treated as public information.

You are responsible for ensuring that any content you publish through Gasimus does not expose confidential, personal, or regulated information without proper authorization.

We process information to perform our contract with you, comply with legal obligations, protect legitimate interests such as security and abuse prevention, and, where required, based on consent.

We may disclose information when reasonably necessary to:

• comply with law, regulation, court order, or lawful request;
• protect rights, safety, and security of Gasimus, users, or third parties;
• investigate fraud, abuse, or violations of our terms; or
• support a merger, acquisition, financing, restructuring, or sale of assets.

We retain information for as long as reasonably necessary to operate the service, maintain your account, provide project history, reconcile billing, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods may vary depending on the type of data, whether content has been published publicly, whether a transaction is required for accounting records, and whether deletion is necessary for safety or legal compliance.

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission, storage, or processing is completely secure, so we cannot guarantee absolute security.

You can access and update certain account information from your profile or settings. You may also request help with account updates, data access, or deletion by contacting [email protected].

Depending on your location, you may have rights to request access, correction, deletion, objection, restriction, or portability of certain personal data, subject to applicable law and our legitimate business and legal obligations.

Gasimus and its service providers may process or store information in countries other than your own. By using Gasimus, you understand that your information may be transferred to jurisdictions that may have different data protection rules than your home country.

Gasimus is not directed to children under 13, and you may not use the service if applicable law prohibits it for your age. If we learn that we collected personal data from a child in violation of applicable law, we may delete the information and disable the account.

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and revise the effective date. Your continued use of Gasimus after the updated policy takes effect means you accept the revised policy.

Questions or privacy requests can be sent to [email protected]. For service terms, please review our Terms and Conditions.

Billing, tax, and invoice records may need to be retained for legal, accounting, fraud-prevention, and payment-partner compliance purposes even if other account content is deleted where permitted by law.