Privacy Policy

Data controller and operator: Dreamega IT LLC, a Wyoming limited liability company, 30 N Gould St, Ste N, Sheridan, WY 82801, United States.

1. Scope

This policy explains how GenSpicy handles information when you visit the site, create an account, purchase credits, use its adult AI creative tools, or take part in the referral program.

2. Information We Handle

Depending on the features you use, this may include:

• Account details such as your name, email address, and sign-in records
• Your 18+ and terms confirmation, with its date and the terms version you accepted
• Sign-up context: IP address, approximate country, browser language, the first external site that referred you, and campaign (UTM) tags in the link you arrived with
• Prompts, uploaded reference media, generated outputs, and generation settings
• Credit-pack purchases, credit reservations and charges, and transaction records
• Referral records, if you were referred or you refer others
• Device, browser, session, security, and diagnostic information
• Support messages and abuse reports

Payment card details are handled by the payment processor rather than stored by GenSpicy.

3. Why We Use Information

We use information to operate accounts and generations, deliver purchases, keep your history, run the referral program, provide support, prevent abuse, enforce adult-safety rules, secure the service, meet legal obligations, and improve reliability.

4. Your Media Stays Private

Your generated and uploaded media are private to your account. They are not shown in a public gallery or to other users, and the files are delivered only to your signed-in account. Private means private inside GenSpicy: to create a result, your prompt, selected reference media, and settings must be sent to the AI provider (section 5).

5. Service Providers

We share information with providers only as needed to run the service. Some of them are used only when the operator turns them on in the admin settings; those are marked "when enabled".

• AI generation: our third-party AI generation partner receives prompts, selected reference media, and generation settings to complete each request, and processes them under its own terms and privacy policy. It keeps generated media for up to seven days.
• Storage: generated outputs and uploads are kept in the configured object storage (for example Cloudflare R2 or another S3-compatible service).
• Payments: the payment provider you choose at checkout (for example Stripe, PayPal, or Creem) processes your payment and shares the payment result with us.
• Email: an email provider (for example Resend or Cloudflare Email) sends account and verification emails, when enabled.
• Google sign-in: if you sign in with Google or Google One Tap, Google shares your name, email address, and profile picture with us, when enabled.
• Analytics: Google Analytics and Plausible measure site usage, when enabled. Google Analytics uses cookies; Plausible does not. When the cookie banner is on, both wait for your consent.
• Support chat: Crisp or Tawk.to can provide a chat widget, when enabled. They receive the messages you send and technical data about your visit.

Account, purchase, credit, and referral records are kept in GenSpicy's own database.

6. Cookies and Local Storage

We use these first-party cookies:

• Sign-in session (named with the genspicy prefix, such as genspicy.session_token): keeps you signed in. Required.
• Language (PARAGLIDE_LOCALE): remembers the language you chose.
• Cookie choice (cookie_consent): remembers whether you accepted or rejected optional cookies.
• Referral (genspicy-affiliate-referral): when you open a referral link, stores the referral code for 30 days so that a new account can be credited to the person who shared it. The first valid link counts. It is HttpOnly, so page scripts cannot read it. If you reject optional cookies, it is not set, and an existing one is removed.
• Attribution (utm_source, utm_medium, utm_campaign, utm_term, utm_content, first_referrer): for 30 days, remember the campaign tags and the external site you first arrived from, so we can record them on your account if you sign up.

Analytics and support chat providers set their own cookies when they are enabled.

Your browser's local storage also keeps: your 18+ confirmation from the age gate (for 30 days on that device), unsent prompt drafts and studio preferences, and your light or dark theme. You can clear these in your browser at any time. Clearing them does not delete the 18+ and terms record on your account.

7. Referral Program

If you share a referral link, your referral page shows each account you referred by a masked email address (for example a***@example.com), whether it has made a qualifying purchase, and the commission recorded for it. This tells you that the person signed up and, where applicable, made a purchase. If you were referred, the person who referred you sees this information about your account. We do not show them your full email address, your prompts, or your media.

8. Retention and Deletion

Retention depends on account settings, operational needs, safety requirements, and law. You can delete your generated and uploaded media from your media library at any time. To delete your account or other eligible personal information, email support@genspicy.com from the address on your account. Some transaction, fraud-prevention, or legal records may need to be kept longer.

9. Security

We use reasonable technical and organizational safeguards. No online service can promise absolute security, so avoid uploading identifying material you do not want processed by the service.

10. Adults Only

The service is not intended for anyone under 18. If we learn that a minor has provided personal information, we will take steps to remove it and restrict access.

11. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export personal information, and to withdraw consent to optional cookies. Contact us to make a request. We may need to verify your identity.

12. International Processing

Our providers may process information in several countries, including the United States. Where required, appropriate transfer safeguards are used.

13. Contact

Privacy requests may be sent to support@genspicy.com.