Privacy Policy

Account information. When you sign up, we collect your email address and store authentication session data through Better Auth. If you subscribe to a paid plan, Stripe handles your payment details directly — Spritory never sees or stores your card number.

Content you upload or generate. Reference images you upload as style packs, the prompts you write, and the assets Spritory generates or edits on your behalf are stored in Cloudflare R2 and indexed in our database (Cloudflare D1) so you can find and reuse them.

Usage data. We use PostHog to understand how the product is used — pages visited, features used, generation counts, and similar product-analytics events. We do not sell this data.

Technical data. Standard request metadata (IP address, user agent, timestamps) is logged by Cloudflare as part of running the Workers infrastructure that serves Spritory.

We use the information above to:

• Operate the core product — generate and edit assets, save your style packs, projects, and generation history.
• Authenticate you and keep your account secure.
• Process payments and manage subscriptions and usage-based credits.
• Understand aggregate product usage so we can fix what's broken and prioritize what to build next.
• Respond to support requests sent to contact@spritory.com.
• Send you release notes or account-related email if you opt in.

We do not use your prompts, uploads, or generated assets for advertising.

Generation and editing in Spritory run on OpenAI's gpt-image-2 model, accessed through the Cloudflare AI Gateway. When you generate or edit an asset, the prompt you write and the reference or source images involved are sent to OpenAI to fulfill that specific request. This is necessary for the product to work — there is no way to generate an image without sending the request to the model that generates it.

We do not train models on your art. Neither Spritory nor OpenAI, under our API terms, use your prompts or images to train models. There is no fine-tuning or LoRA process on user content anywhere in the product — gpt-image-2 is a closed model we call via API, not one we train.

We rely on the following subprocessors to run Spritory. Each only receives the data needed to perform its function:

• OpenAI — AI image generation and editing (gpt-image-2), accessed via Cloudflare AI Gateway.
• Cloudflare — application hosting (Workers), database (D1), cache/session storage (KV), file storage (R2), and the AI Gateway that proxies model calls.
• Stripe — payment processing and subscription billing.
• PostHog — product analytics.

We keep your account data, style packs, projects, and generation history for as long as your account is active, so your work stays available to you. If you delete a style pack, project, or generation, we remove the associated database records and the underlying files in R2. If you close your account, we delete your account data and stored files within a reasonable period, except where we're required to retain records (for example, billing records needed for tax or accounting purposes).

You can access, export, or delete your data at any time. For style packs, projects, and generations, this is available directly in the product. For anything the product doesn't yet expose a self-serve control for — a full account export, full account deletion, or a correction to account information — email contact@spritory.com and we'll handle it directly. We'll respond and act on these requests promptly.

If you're located in the EEA, UK, or another jurisdiction with statutory data-subject rights, those rights (access, rectification, erasure, portability, objection) apply to you and can be exercised through the same contact address.

We use a session cookie to keep you signed in (via Better Auth) and analytics cookies set by PostHog to understand product usage. We don't use third-party advertising cookies or trackers.

Spritory is in beta and this policy will evolve as the product does. If we make a material change, we'll update the "Last updated" date above and, where appropriate, notify active users directly.

Questions about this policy or your data? Email contact@spritory.com.