Privacy Policy

1. Scope

This Privacy Policy explains how FluxoKit Servicos LTDA handles personal information for FluxoKit's English market surface and Stripe billing. It also serves as our notice at collection: the categories of personal information we collect and the purposes for which we use them are described below.

Paid checkout is live. FluxoKit accepts paid subscriptions billed in U.S. dollars through Stripe, and these policies govern that paid checkout.

2. Data we collect

We collect account data, authentication details, usage events, prompts, uploads, generated assets, support messages, marketing attribution, device and browser data, IP address, cookies, security logs, and billing-related records.

For paid checkout, Stripe collects payment method, billing address, tax, fraud, invoice, receipt, dispute, and refund data. FluxoKit stores Stripe customer, subscription, invoice, event, and entitlement identifiers rather than full card numbers.

If you upload photos or images of people (including your own likeness), those images may contain facial or other biometric-related features. We process uploads only to provide the generation or edit you request, retain them only as long as needed for the service, your account, and legal or security obligations, and do not use them to build a facial-recognition database or sell them. Depending on your state (for example, Illinois BIPA, Texas CUBI, or Washington My Health My Data), additional consent or limits may apply.

3. How we use data

We use data to provide the service, process generations, maintain accounts and credits, operate billing, prevent abuse and fraud, secure the platform, support customers, analyze reliability, send service communications, and comply with legal obligations.

4. Service providers and sharing

FluxoKit may share necessary data with AI model providers, authentication, database, hosting, storage, analytics, marketing, support, email, payment, tax, fraud-prevention, and compliance providers that help operate the service.

We do not sell personal information for money. Some analytics or advertising technologies may be considered sharing under certain U.S. state privacy laws; where applicable, you can use the privacy request process below to opt out of sale or sharing.

5. Stripe and payment data

Stripe processes payment data for paid checkout. Stripe's hosted payment surfaces handle payment methods, fraud checks, tax calculation, invoices, receipts, refunds, disputes, and customer billing management.

FluxoKit will use Stripe billing events as provider input, then reconcile those events into internal subscription, entitlement, credit, invoice, and refund records.

6. Cookies and analytics

We use cookies and similar technologies for authentication, session continuity, security, analytics, attribution, product reliability, and abuse prevention. Essential cookies are required for the platform to work.

Non-essential analytics and advertising technologies are subject to your privacy choices: FluxoKit honors the Global Privacy Control browser signal automatically, and you can opt out of the sale or sharing of personal information for advertising at any time using the Do Not Sell or Share My Personal Information link in the site footer or the Your Privacy Choices page.

7. U.S. privacy rights

Depending on your location and the laws that apply, you may have rights to know, access, delete, correct, port, or limit the use of personal information, and to opt out of sale, sharing, or certain targeted advertising uses.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, receive notice at collection, and exercise rights without discrimination. We will not require you to create a new account only to submit a privacy request. To opt out of the sale or sharing of personal information for cross-context behavioral advertising, use the Do Not Sell or Share My Personal Information link in the site footer or the Your Privacy Choices page; FluxoKit also honors the Global Privacy Control browser signal.

8. Retention and security

We keep data while needed for your account, service operation, security, billing, tax, legal obligations, fraud prevention, dispute handling, support, and legitimate business records.

We use technical and organizational measures such as HTTPS/TLS, access controls, audit logs, provider security controls, and database security controls. No online service can guarantee absolute security.

9. International processing

FluxoKit and its providers may process data in the United States, Brazil, and other countries where infrastructure and service providers operate. Data protection laws may differ by location.

10. Children's data

FluxoKit is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Where the CCPA/CPRA applies, we do not sell or share the personal information of consumers under 16 without opt-in consent. If you believe a child has provided personal information, contact us and we will delete it.

11. Requests and contact

To submit a privacy request, contact contato@fluxokit.io. We may verify your identity before acting on a request. Where the CCPA applies, we aim to respond within 45 days unless a permitted extension applies; other requests will be handled within the legally applicable period.