Privacy Policy

1. Information we collect

We collect the minimum information necessary to provide our service. Specifically:

• Account data: name, email address, profile image, and hashed password (for email sign-up).
• Uploaded content: product photos, AI model reference images, and generation outputs you create on the platform.
• Billing data: payment metadata (transaction reference, amount, status) received from Paystack. We never see or store your card details.
• Usage data: pages visited, features used, credit ledger entries, and basic device/browser information used to improve the product.

2. How we use your information

• Run your SteechAI account and fulfil pose/video generations.
• Process payments through Paystack and deliver credit top-ups.
• Send operational emails (receipts, generation-ready notifications, low-credit warnings).
• Detect abuse, prevent fraud, and comply with legal obligations.
• Improve model quality and product performance in aggregated, non-identifying form.

3. Sharing with third parties

We share limited personal data with trusted providers strictly to deliver the service:

• RunwayML (AI generation) — receives product/model prompts and reference images.
• Paystack (payments) — receives your email and billing amount.
• Cloudinary (asset storage) — stores your uploaded and generated media.
• Resend (transactional email) — sends you receipts and generation-ready alerts.
• Vercel / Neon (hosting) — powers the application and database.

4. Data retention

We retain your account data for as long as your account is active. Generated media remains available in your account until you delete it. Transaction records are kept for at least seven (7) years to meet Nigerian tax and accounting requirements. You can request deletion of non-transactional data at any time.

5. Your rights (NDPR)

Under Nigeria's NDPR you may, at any time, request to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated personal data (subject to legal retention).
• Object to or restrict certain uses of your data.
• Port your data to another service.

6. Security

Passwords are hashed using bcrypt, network traffic is encrypted in transit (TLS), and all uploaded assets live on Cloudinary's hardened infrastructure. We regularly review access controls and rely on industry-standard practices for the rest of our stack.

7. Children

SteechAI is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact support@steechai.com and we will remove it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app and via email at least 14 days before they take effect.