Privacy Policy

Who we are

Godly Art is a product operated by Celesta Technologies AB, a Swedish company. Celesta Technologies AB is the controller of the personal data processed through Godly Art for the purposes described in this policy.

Information we collect

We collect account details needed to operate the product, such as your email address and basic profile information from Google sign-in. We also store artwork generation records, orders, related usage data, account credit activity, and information you provide through prompts, uploads, and other interactions with the service.

We may also collect technical and operational information such as IP address, country or market signals, device or browser information, authentication events, and abuse-prevention or security-related metadata.

How we use information

We use this information to authenticate your account, save artwork, process purchases, manage credits, fulfill print orders, prevent abuse and fraud, and improve the reliability of the service.

We may also use submitted content, generated outputs, usage data, and related technical information to develop, improve, evaluate, secure, and support the service and related products and features, including for analytics, safety, research, and training or improving machine learning systems and similar technology used in connection with Godly Art.

If you choose to submit content to any public gallery, showcase, remix, reuse, or other community feature that we may offer, we may also use and display that public content in connection with those features and related promotional or marketing activities.

Legal bases for processing

Where European data protection law applies, we generally process personal data because it is necessary to provide the service to you, comply with legal obligations, pursue our legitimate interests in operating, securing, improving, and supporting Godly Art, or because you have given consent where consent is required.

Our legitimate interests may include fraud prevention, service security, analytics, product development, customer support, abuse investigation, and protection of our business, users, and legal rights.

Payments and third parties

Payments are processed by Stripe, and authentication is provided through Google and Supabase. We may also use service providers involved in hosting, analytics, email delivery, and order fulfillment. We only collect and share the information reasonably necessary to operate the product and complete transactions.

We may also use privacy-focused analytics tools, including Vercel Web Analytics, to understand aggregate traffic, page performance, and product usage patterns. Where such tools are enabled, we intend to use them in a way that is designed to minimize personal data collection and avoid unnecessary tracking.

Cookies and similar technologies

We use cookies and similar technologies that are necessary to run the service, keep you signed in, support security and abuse-prevention features, remember certain preferences, and improve product performance and reliability.

Some privacy-focused analytics tools we may use are designed to work without traditional cookies or cross-site tracking. If we later introduce analytics, advertising, or personalization tools that require consent under applicable law, we will update our practices and notices accordingly.

Order fulfillment

For print orders, we store the shipping information required to process and deliver your order. This information is used only for order handling and related support.

Fraud prevention and enforcement

We may process account, device, network, purchase, and usage information to detect abuse, prevent unauthorized account creation, investigate fraud, enforce our Terms, and protect the service, our business, and other users.

International processing

We and our service providers may process personal data in countries other than your own, including outside the European Economic Area. Where required, we rely on appropriate safeguards and legal transfer mechanisms for those transfers.

Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

Godly Art is not intended for children under the minimum age required to use the service under our Terms and applicable law. We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided us with personal data improperly, contact us and we will review the situation.

Cloudflare Turnstile

We use Cloudflare Turnstile as part of our sign-in and abuse-prevention flow to help determine whether interactions are made by a human and to protect promotional starter credits and related features from automated or fraudulent abuse.

When Turnstile is used, your browser connects to Cloudflare and Cloudflare may receive technical and interaction-related information necessary to run the verification service. You can read more in Cloudflare's Turnstile Privacy Addendum.

Retention

We retain personal data for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, maintain accounting and purchase records, and enforce our agreements.

If you request account deletion, we may deactivate your account immediately and place it in a short retention window before final deletion so you can reverse the request by signing back in. We may continue to retain limited information where necessary for legal, tax, accounting, fraud-prevention, or record-keeping purposes.

Your rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or restriction of the personal data we hold about you, and to object to certain processing activities. You may also have the right to request data portability where applicable.

You can request deletion of your Godly Art account from within the product. After a deletion request, we may immediately deactivate the account and schedule final deletion after a waiting period. If you sign back in before the waiting period ends, the deletion request may be cancelled automatically.

If you want to exercise privacy rights or have concerns about how we process your data, contact us at hello@godly.art. If you are in the EU or UK, you may also have the right to lodge a complaint with your local data protection authority.

Contact

If you have questions about this policy or how your data is handled, you can contact us at hello@godly.art.

Updates

We may update this policy as the service evolves. If we make material changes, the updated version will be published here with a new effective date.