Privacy Policy

1. Our approach

SuperReall is private by default. Your prompts, reference images, queue and gallery are tied to your account and visible only to you. We collect the minimum data needed to run the Service, and we never sell your personal data.

2. Data we collect

• Account data: email address and password hash when you sign up. Optional profile details you provide.
• Content you create: prompts, uploaded reference images, render settings and generated videos — stored so you can access your gallery.
• Billing data: plan, credit balance and transaction history. Payment details are processed by our payment provider; we don't store full card numbers.
• Usage data: pages visited, features used, device and browser type, approximate location (from IP). Used for reliability, abuse prevention and product improvement.
• Support messages: what you send us via the contact form or email.

3. How we use it

• Operate the Service: authentication, rendering, storage, delivery of your videos.
• Billing and credit metering.
• Safety: detecting abuse, fraud and violations of our Terms.
• Product improvement and aggregated, anonymized analytics.
• Communicating with you: transactional emails, and marketing only if you've opted in.

Model training: we do not train generative models on your private prompts, images or videos without your explicit opt-in consent.

4. Cookies

We use:

• Essential cookies — session authentication and security. Required for the Service to work.
• Preference cookies — e.g. your cookie-consent choice (stored in local storage).
• Analytics — only if enabled, using a privacy-friendly, cookieless-capable provider. No cross-site ad tracking, ever.

You can manage non-essential cookies via the consent banner. Clearing cookies may sign you out.

5. Sharing

We share data only with:

• Infrastructure providers (hosting, GPU rendering, storage, email, payments) under contractual data-protection terms.
• Legal authorities when required by law or to prevent harm.

We do not sell personal data or share it with advertisers.

6. Retention and deletion

• Account and gallery content is kept while your account is active.
• Deleting your account deletes your prompts, images and videos within 30 days (backups within 90).
• Billing records are retained as required by tax law.

7. Security

Passwords are hashed with bcrypt; sessions use httpOnly, SameSite cookies; traffic is encrypted in transit (TLS). No system is perfectly secure — if you suspect unauthorized access, contact security@superreall.com immediately.

8. Your rights

Depending on your jurisdiction (including GDPR/UK GDPR and CCPA/CPRA), you may have the right to access, correct, export or delete your data, and to object to or restrict certain processing. Email privacy@superreall.com — we respond within 30 days.

9. Children

The Service isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child provided us data, contact us and we'll delete it.

10. International transfers

Data may be processed in the country where our infrastructure runs. Where required, we use standard contractual clauses or equivalent safeguards.

11. Changes

We'll post updates here and notify account holders of material changes at least 30 days in advance.

12. Contact

Privacy questions: privacy@superreall.com or via our contact page.