Privacy Policy

Last updated: July 10, 2026

This Privacy Policy describes how Wandura ("Wandura", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit our website, create an account, or use our AI creative studio to generate images, videos, and audio (collectively, the "Service"). It also explains your privacy rights and how the law protects you. By using the Service, you acknowledge that you have read and understood this Policy.

Who we are

Wandura is an AI creative studio that lets creators, marketers, and sellers generate visual and audio content. We are the controller responsible for your personal information processed through the Service. If you have any questions, you can reach us at support@wandura.ai.

1. Information we collect

a) Information you provide to us

• Account & profile: your email address, display name, and password or, if you sign in with a third-party provider (such as Google or Facebook), the basic profile details that provider shares with us (name, email, and avatar).
• Content you submit: the text prompts you enter, images or files you upload, reference material, and the generation settings you choose.
• Content you create: the images, videos, and audio generated for you, which we store so you can access them in your library.
• Payment details: your subscription tier, credit balance, and transaction history. Card payments are handled by our payment processor (Stripe) — we do not receive or store your full card number.
• Support & communications: messages, feedback, and any information you share when you contact us.

b) Information we collect automatically

• Device & log data: IP address, browser type, operating system, device identifiers, referring pages, and access timestamps.
• Usage data: the features you use, tools and models selected, actions taken, and interactions with the interface.
• Cookies & similar technologies: as described in Section 5.
• Approximate location: derived from your IP address (for security, fraud prevention, and localization).

c) Information from third parties

• Authentication providers (e.g. Google, Facebook) when you sign in with them.
• Our payment processor, regarding the status of your payments and subscription.
• Analytics and advertising partners, which help us understand how the Service is found and used.

2. Legal bases for processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Performance of a contract — to provide the Service you sign up for (accounts, generation, billing).
• Legitimate interests — to secure, maintain, and improve the Service, prevent abuse, and measure performance, balanced against your rights.
• Consent — for non-essential cookies, certain analytics/advertising, and marketing emails. You may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, tax, and accounting requirements.

3. How we use your information

• Provide, operate, and maintain the Service — including generating content and managing your account, credits, and subscription.
• Process payments, issue credits, and prevent fraud, abuse, or unauthorized use.
• Personalize your experience and remember your preferences.
• Analyze usage to improve features, reliability, and performance.
• Communicate with you about your account, security, updates, and support.
• Measure and optimize our marketing (including via the partners in Sections 5 and 7).
• Comply with legal obligations and enforce our terms.

4. AI generation & your content

To produce your results, the inputs you submit (prompts, uploaded media, and parameters) are transmitted to our AI infrastructure provider (fal.ai) and the underlying model providers necessary to fulfill your request. Generated media is stored on our cloud storage and content-delivery network so it can be returned to you.

You are responsible for the content you generate and for ensuring you have the rights to any material you upload. Please do not submit personal data of others, or unlawful, infringing, or harmful content.

5. Cookies & tracking technologies

We use the following categories of cookies and similar technologies:

• Essential — required to sign you in, keep your session secure, and run core features. These cannot be switched off.
• Analytics — help us understand traffic and usage (e.g. Google Analytics).
• Advertising & measurement — help us measure campaigns and conversions (e.g. the Meta Pixel and Conversions API).

You can manage cookies through your browser settings, and where required we ask for consent to non-essential cookies. Some browsers offer a "Do Not Track" signal; because there is no common standard, we currently respond to recognized opt-out signals where legally required. Disabling some cookies may affect how the Service works.

6. How we share information

We do not sell your personal information. We share it only in these situations:

• Service providers (sub-processors) — the vendors listed in Section 7, who process data only to perform services for us.
• Legal & safety — to comply with law, respond to lawful requests, or protect the rights, property, or safety of Wandura, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with notice where required.
• With your consent — when you direct us to share, or otherwise agree.
• Aggregated / de-identified data — which cannot reasonably identify you.

7. Service providers (sub-processors)

We rely on trusted providers to run the Service. Each processes data only as needed for its function:

8. Facebook Login & data deletion

If you choose to sign in with Facebook, we receive the basic profile information you approve (such as your name, email, and profile picture). We use it only to create and secure your account. We do not post to your Facebook account without your action.

How to delete your data

• Delete your account at any time from your account settings, which removes your profile and generated content, subject to Section 9.
• Or email support@wandura.ai with the subject "Data Deletion", and we will delete the personal data associated with your account and any data obtained via Facebook Login.

9. Data retention

We keep your account data for as long as your account is active. Content you generate is retained so you can access it, and is deleted when you delete it or close your account (backups are purged on a rolling basis thereafter). We may retain limited records longer where necessary to comply with legal, tax, or accounting obligations, resolve disputes, or prevent fraud and abuse.

10. International data transfers

Wandura serves a global audience, and your information may be processed in countries other than where you live, including the United States. Where such transfers are subject to data-protection laws, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your information.

11. Data security

We use encryption in transit, access controls, reputable infrastructure providers, and internal safeguards to protect your data. No method of transmission or storage is completely secure; while we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you as required by law.

12. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Restrict or object to certain processing.
• Portability — receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

You can exercise many of these directly in your account settings, or by emailing support@wandura.ai. We may need to verify your identity, and we will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

13. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising except through the measurement partners described in Sections 5 and 7, which you can opt out of via your cookie/browser controls. You may exercise these rights by contacting support@wandura.ai; you may also use an authorized agent where permitted by law.

14. Marketing communications

We may send you product updates or promotional messages. You can opt out at any time by using the "unsubscribe" link in the email or by contacting us. We will still send essential account and transactional messages (for example, billing or security notices).

15. Children's privacy

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information. If you believe a child has provided us personal data, please contact us and we will delete it.

16. Third-party links

The Service may contain links to third-party websites or services that we do not operate or control. This Policy does not apply to them; we encourage you to review their privacy policies.

17. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice through the Service. Your continued use after changes take effect constitutes acceptance of the updated Policy.

18. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at support@wandura.ai.