Privacy Policy

1) Introduction

This Policy explains what data we collect, how we use it and how we protect it. It applies to all DamyxIA users, both on the free plan and on Premium, and complements our Terms and Conditions. Our commitment is to minimize data collection, to be transparent about processing and to give users effective control over their personal information.

2) Data collected

Email, images, generation history, in-app actions, prompts, language preferences and technical browser data (user agent, anonymized IP, screen resolution). Data is collected only when necessary to provide the service, comply with legal obligations or improve platform security.

3) Legal basis (GDPR)

Processing is carried out under the following legal bases of the General Data Protection Regulation: contract execution (to provide the contracted service), legitimate interest (security, abuse prevention), consent (when explicitly requested, e.g. terms acceptance) and legal compliance (billing, court orders, tax retention).

4) Data use

Authentication, internal service operation, security, fraud prevention, billing, technical support, delivery of essential notifications and experience improvement. DamyxIA does not sell personal data, does not perform automated profiling with significant legal effects and does not use user data to train third-party models.

5) Storage

Data is stored in MongoDB with restricted access controls and auditing. Passwords are stored hashed with modern algorithms (never in plain text). Connections use TLS/HTTPS and session cookies are httpOnly. We take regular backups and apply documented retention policies.

6) Third parties

We work with specialized processors that meet equivalent protection standards: Stripe (payments), Render (hosting), MongoDB (database), Resend (transactional email delivery), Sentry (error logging) and AI providers (for image generation and assistance). These third parties only access the information strictly necessary to provide their service.

7) Cookies

We use only strictly necessary cookies for session, authentication and user preferences (e.g., language). We do not use advertising cookies, cross-site tracking or third-party cookies for commercial purposes. Users may delete cookies from their browser, although this may affect service functionality.

8) User rights

Users may exercise the following rights: access, rectification, deletion, data portability, objection and restriction of processing. Consent can also be revoked at any time from the legal panel or via a written request to manager@damyxia.com. We respond within the legally required timeframe.

9) Minimum age

DamyxIA is intended exclusively for people over 18 years of age. We do not knowingly collect data from minors. If we detect that an account belongs to a minor, we will suspend it and delete the associated information.

10) International transfers

Data may be processed in the United States and in other jurisdictions where our providers operate. In such cases we apply the safeguards required by the GDPR (standard contractual clauses, recognized certification mechanisms) to protect your information with the same level of guarantees.

11) Changes

We may update this Policy at any time. If the version changes substantially, you will be asked to accept the updated terms again. The current version will always be published on this page with the last-updated date.

Last updated: May 11, 2026