instastudio
Sign in

Legal

Privacy Policy

Effective 8 May 2026

This Privacy Policy explains how InstaStudio ("we", "us", or "our") collects, uses, stores, and shares information about you when you use our website, services, and applications (collectively, the "Service"). InstaStudio is operated by Manifest Solutions L.L.C-FZ, United Arab Emirates.

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

  • Account information. Name, email address, password (hashed), profile preferences, language, and role within your team.
  • Authentication data. When you sign in with a third-party identity provider (such as Google), we receive your verified email and basic profile fields.
  • Reference content. Product photos, source images, prompts, and any other material you upload or paste into the Service.
  • Generated outputs. Images and videos produced by the Service from your inputs.
  • Wallet and billing data. Wallet balance, transaction ledger, top-up amounts, payment method tokens (held by our payment processor — we do not store full card numbers), and invoices.
  • Usage data. Logs, device and browser information, IP address, pages viewed, generation counts, and operational telemetry needed to run, secure, and improve the Service.
  • Support communications. Messages you send us and our replies.

2. How We Use Your Information

We use the information above to:

  • operate, maintain, and improve the Service;
  • generate the images and videos you request;
  • charge your wallet, process top-ups, and prevent fraudulent or abusive use;
  • communicate with you about your account, security, and changes to the Service;
  • respond to support requests and legal demands;
  • monitor performance, debug issues, and analyse aggregate usage trends.

We do not sell your personal information. We do not use the content you upload to train third-party generative models on your behalf.

3. AI Processing of Your Content

To produce the outputs you request, we transmit your prompts and reference images to specialised AI service providers acting on our behalf. These providers are contractually limited to processing your content for the purpose of fulfilling your request and may retain the content briefly for diagnostics, abuse prevention, and service quality.

We do not control the internal workings of third-party models, and AI output is probabilistic and may contain errors, omissions, or unexpected elements. Please review every result before using it.

4. Service Providers and Sharing

We share information with the following categories of providers:

  • Cloud hosting and storage — to operate the platform and hold your reference images and outputs.
  • AI generation providers — to render the images and videos you request.
  • Payment processors — to take card payments, manage saved payment methods, and prevent payment fraud. Card numbers and authentication data are handled directly by them.
  • Email and messaging providers — to send transactional notifications.
  • Analytics and monitoring providers — to measure performance and detect outages.

We may also disclose information when required to comply with applicable law, valid legal process, or to protect our rights, property, or safety, or that of our users or the public.

5. Storage and International Transfers

The Service is hosted on cloud infrastructure located in the European Union (Frankfurt, Germany) and the broader Middle East region. By using the Service you consent to the international transfer of your information to these regions and to any country where our service providers operate, subject to appropriate contractual safeguards.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. Account, transaction, and tax records are kept for the period required by applicable law. Generated images and videos remain in your account until you (or we) delete them. You may request deletion of your account at any time; certain records may be retained in archival or anonymised form to comply with legal, accounting, or auditing obligations.

7. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS), encryption at rest where appropriate, restricted access controls, and routine security reviews. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on the jurisdiction in which you reside, you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing. You can exercise most of these rights directly inside the Service. For anything else, contact us using the details below.

9. Cookies and Similar Technologies

We use first-party cookies and similar technologies to keep you signed in, remember your locale preference, secure form submissions against forgery, and operate background features such as real-time generation updates. We do not use cookies for cross- site advertising.

10. Children's Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. The "Effective" date at the top reflects the most recent revision; continued use of the Service after that date constitutes acceptance of the updated Policy.

12. Contact Us

Questions about this Privacy Policy or our data practices can be sent to privacy@instastudio.ai.