Privacy Policy

October 21, 2026

Effective Date: October 21, 2026

At Fuser, your work is your business. This Privacy Policy explains what personal data Fuser Technologies, Inc. ("Fuser," "we," "our," "us") collects, how we use and disclose it, and the rights you have over it. By using the Service you acknowledge the practices described here. Your use of the Service is at all times also subject to our Terms of Service, which incorporate this Privacy Policy. Capitalized terms used but not defined here have the meanings given in the Terms of Service.

If we make material changes to this Privacy Policy, we will notify you by posting a notice on our website and/or by email before the changes take effect.

What This Policy Covers

This policy covers personal data we collect when you access or use the Service — information that identifies or relates to a particular individual, including anything defined as "personal information" or "personal data" under applicable privacy laws. It does not cover the practices of companies we don't own or control.

A note on scope: your projects and creative content ("User Content") are governed primarily by the confidentiality and content terms in our Terms of Service — we process User Content only to provide the Service, and we do not train AI models on it or permit the AI providers we engage to do so. The exception is a custom model you choose to create from your own content (for example, a Style trained on images you upload): it is trained at your direction, for your use, and is visible to others only if you publish it. If you connect your own API key for an AI provider, that provider's handling of your data is governed by your agreement with it. This policy focuses on personal data.

Personal Data We Collect

  • Profile and contact data (from you): Name, email address, username, profile image. Your username, name and image appear on your public profile and on anything you publish.
  • Account and sign-in data (from you and your sign-in provider): Email address and one-time sign-in codes (codes are not kept after use); identifiers from Google or your organization's single sign-on provider; session records; API keys you create.
  • Payment data (from you and Stripe): Billing details, transaction history. Full card numbers are processed by our payment processor (Stripe) and never stored by Fuser.
  • Organization data (from you and your Organization): Organization name and logo, members and roles, teams, invitations (including the email addresses of people invited), credit usage and spending limits.
  • User Content metadata (from you): Project names, sharing settings, comments, collaboration activity.
  • Inputs and Outputs (from you): Prompts, reference media, and generated content, processed to provide AI features.
  • Stored credentials (from you): Third-party API keys you choose to store with us, kept in an encrypted secrets vault.
  • Device and connection data (collected automatically): IP address and the approximate location derived from it (country, region, city, postal code), browser type, operating system, device and cookie identifiers.
  • Usage data (collected automatically): Pages visited, features used, interaction events, how you arrived (referrer and campaign parameters), session replays (see Tracking Tools & Opt-Out).
  • Communications (from you): Support requests and bug reports (with your account details, so we can help), survey responses, emails you send us.

How We Use Personal Data

We use personal data to:

  • Provide, maintain, customize, and improve the Service, including AI features you invoke and features that run automatically, such as search, tagging and descriptions of your files;
  • Create and manage your account and your Organization memberships;
  • Process payments and manage subscriptions;
  • Provide customer support and respond to your requests;
  • Send transactional communications (receipts, security notices, service announcements) and, with your consent or as otherwise permitted by law, product and marketing communications tailored to your plan and how you use the Service, which you can opt out of at any time;
  • Measure and improve our advertising and attribute sign-ups and purchases to ads and referral links, subject to your cookie choices (see Tracking Tools & Opt-Out);
  • Monitor, secure, and debug the Service, and prevent fraud and abuse, including checks at sign-up of your IP address against VPN, proxy and IP-reputation services and of your email domain against disposable-email services;
  • Comply with legal obligations and enforce our agreements.

For users in the EEA, UK, and similar jurisdictions, our legal bases are: performance of our contract with you (providing the Service), our legitimate interests (securing and improving the Service, preventing abuse), your consent (where required, e.g., analytics and marketing cookies and marketing emails), and compliance with legal obligations.

How We Disclose Personal Data

We disclose personal data only to:

  • Service providers that process data on our behalf to run the Service — hosting and infrastructure, payment processing, email delivery, analytics, logging and error tracking, customer support tools, fraud prevention, web and stock-image search used by AI features, and the AI model providers that power generation and automatic features. Our current providers, what each one does, and where they are located are published on our Sub-Processors page, which we keep up to date.
  • Advertising partners (Google, Meta, TikTok, Reddit, X, Apollo and Dub), only as your cookie choices allow: with your consent in the European Economic Area, the United Kingdom and Switzerland, and elsewhere until you opt out. See Tracking Tools & Opt-Out.
  • Your Organization, if you use the Service through an Organization: administrators can see your membership, role, activity and credit usage within Organization workspaces, and can access all content in those workspaces, including projects you have not shared. If your Organization verifies your email domain, it may require you to sign in through its single sign-on provider.
  • Other users and the public, only as you direct through sharing and publishing settings. Files you upload or generate are stored at hard-to-guess web addresses; anyone you give such an address to can open the file, even if the project it belongs to is private.
  • Authorities and other parties when legally required — to comply with law or valid legal process, to protect the rights, property, or safety of Fuser, our users, or the public, or to enforce our agreements.
  • A successor entity in connection with a merger, acquisition, or sale of assets, in which case this policy continues to apply to previously collected data and we will notify you of any change in control.

We may disclose aggregated or de-identified data that cannot reasonably be linked to you for lawful business purposes. We do not sell your personal data for money. Our use of advertising partners may count as "sharing" personal data for cross-context behavioral advertising, or as "targeted advertising," under some US state privacy laws; you can opt out at any time as described below.

Tracking Tools & Opt-Out

We use cookies and similar technologies, described in detail in our Cookie Policy:

  • Essential — sign-in, security, bot protection, and remembering your cookie choice. Disabling these breaks the Service.
  • Functional — remembering preferences and settings.
  • Analytics — understanding how the Service is used so we can improve it. We use product analytics (PostHog), web analytics (Google Analytics), and error monitoring (Sentry). In the app, PostHog and Sentry may record session replays of how you use it so we can find usability problems and bugs. PostHog replays can include text you type (except passwords), what appears on your screen including your canvas, and browser console messages; Sentry replays hide text and media. Replays are accessible only to authorized Fuser personnel. If you decline analytics, PostHog counts visits without cookies and without a persistent identifier, and no session replay is recorded. When you are signed in, we still record how you use features on our servers, linked to your account, to operate, secure and improve the Service.
  • Marketing — measuring and improving our advertising. We use Google Ads, Meta, TikTok, Reddit, and X (Twitter) tags; Apollo, which identifies the company associated with a visitor's IP address; and Dub, which attributes sign-ups and purchases to referral links. When you sign up, start generating, start a checkout or buy, publish, or deploy an app, we may also send these partners the event from our servers together with your account ID, IP address, browser details, advertising cookie identifiers, approximate location, and your email address (hashed before it reaches the advertising platform) — only when your marketing choice allows it.

Your Privacy Choices. If you are in the European Economic Area, the United Kingdom, or Switzerland (or we can't determine your location), we ask before using any analytics or marketing cookies, and nothing beyond essential and functional cookies runs until you choose. Elsewhere, analytics and marketing cookies are on by default and you can opt out at any time. You can review or change your choice at any time with the "Your Privacy Choices" link at the bottom of our website, or in the app under Settings → Notifications → Cookies. We honor Global Privacy Control: if your browser sends it, we treat it as an opt-out of marketing cookies and of sharing for targeted advertising.

You can also control cookies through your browser settings, and opt out of marketing emails via the unsubscribe link in any marketing message.

Data Security

We use appropriate technical and organizational measures proportionate to the sensitivity of the data we process: encryption in transit (TLS) and at rest on our infrastructure providers, an encrypted vault for third-party API keys you store with us, access controls that limit personal data and User Content access to personnel who need it, audit logging of organization activity and billing changes, and logical separation of each customer's data enforced by access controls. No method of transmission or storage is completely secure. We notify affected users and authorities of personal data breaches as required by applicable law, and our Data Processing Agreement makes breach-notification commitments contractual for business customers.

Data Retention

We retain personal data for as long as needed to provide the Service and for legitimate business purposes (legal compliance, dispute resolution, enforcing agreements). In practice: profile data is retained while your account is active. When you delete a project, we delete the project; files it used may remain in storage, at their hard-to-guess addresses, until we remove them. You can ask us to delete your account by emailing privacy@fuser.studio from the address associated with it; we will then delete or de-identify your personal data and User Content, except where retention is required by law (for example, payment records held by Stripe), a minimal record of your email address and marketing preferences so that we never re-subscribe you, and data in backups and logs, which expire on their normal cycle.

Personal Data of Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has provided us personal data, contact privacy@fuser.studio and we will delete it as required by COPPA and applicable law. Parents or guardians may request that we stop collecting from a child, delete collected data, or stop disclosure to third parties.

International Data Transfers

Fuser is based in the United States, and personal data is processed in the United States and in the other locations listed on our Sub-Processors page. Some AI models you can choose are operated by providers outside the United States, including in China. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (and the UK Addendum), as set out in our Data Processing Agreement.

Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you and receive a portable copy;
  • Correct inaccurate personal data;
  • Delete your personal data;
  • Object to or restrict certain processing, and withdraw consent where processing is based on consent;
  • Opt out of the sale or sharing of personal data, targeted advertising, and certain profiling — use "Your Privacy Choices" or Global Privacy Control as described above;
  • Not be discriminated against for exercising these rights;
  • Appeal a decision on your request, and lodge a complaint with your local supervisory authority (for EEA/UK residents).

To exercise any of these rights, email privacy@fuser.studio from the address associated with your account. You can also download your project files from within the Service, and update your profile, email address and cookie choices in Settings. We will verify your identity and respond within the timeframe required by applicable law. Authorized agents may submit requests on your behalf where applicable law permits.

If you use Fuser through an Organization, your Organization may be the controller of data in its workspaces; we will refer requests to the Organization where appropriate, as described in our Data Processing Agreement.

Contact Us

Fuser Technologies, Inc. privacy@fuser.studio — privacy requests and questions support@fuser.studio — general support