Privacy Policy

Unlimited Studio is operated from Papua New Guinea. For questions about this policy or to exercise any right described here, contact support@unlimitedstudio.io.

• Account details — email address, display name, and a password hash. We never see your password.
• Reference images — the photographs you upload to build a character or an environment.
• Prompts and generated output — what you ask for and what comes back.
• Consent records— when you attest to being over 18, or record a depicted person's consent, we store the date, the version of the terms, your IP address and your browser's user agent. These make the attestation meaningful; without them it is just a tick.
• Moderation events — the outcome of automated screening on prompts, uploads and output.
• Usage and billing — credits consumed, plan, and payment status. We never see or store your card details.

Reference images are the most sensitive thing here. In some countries a photograph of a face is treated as biometric or otherwise special category data, with stricter rules.

If you upload a photograph of another person, you are responsible for having their permission — see section 3 of the Terms.

Unlimited Studio does not host AI models. To generate anything, your prompt and your reference images are sent to a model provider, which means they leave our systems and cross borders. The providers we use:

• fal.ai — general image and video generation, and the backup automated safety classifier.
• Venice AI — the primary automated safety classifier. Every prompt and every generated image is checked there, whether or not you have enabled adult content. Venice also generates adult images and video that do not use a reference photo.
• Replicate — adult images that match one of your characters, and Atlas Cloud — adult video from a still. Used only when you have enabled adult content and a generation is routed there.
• Anthropic — used for director-mode planning and some prompt analysis. Prompt text only, not images.

Each provider handles data under its own terms, and we do not control how long they retain a request. If this matters to you, generate without reference images or do not use the service.

We also rely on:

• Supabase — database, authentication and file storage. Your images live here, in private buckets, reachable only through short-lived signed links.
• Vercel — application hosting.
• Verotel — payment processing. They handle your card details; we receive only the fact that a payment succeeded.

• Reference images and generated assets: until you delete them or close your account.
• Deleted characters and environments are soft-deleted first, so a paid generation remains auditable, then their files are removed from storage.
• Consent records and moderation events: retained after account closure. They are the evidence of what was attested and what was screened, and deleting them would erase the trail that protects both you and anyone depicted.
• Billing records: retained as long as tax and accounting rules require.

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to processing, or to complain to a data protection authority.

You can delete characters, environments and generated assets from within the app at any time. For anything broader — a full export, or erasure of an account — contact support@unlimitedstudio.io and we will respond within 30 days.

If you are not a Unlimited Studio user but believe your likeness has been used here, you do not need an account to act. Use the report route.

Files are held in private storage and served only through signed links that expire. Database access is constrained per-user at the database level, so one account cannot read another's data even if the application had a bug.

No system is perfect. If you find a vulnerability, please tell us at support@unlimitedstudio.io before disclosing it publicly.

Unlimited Studio is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, or that imagery of a child has been uploaded or generated here, report it immediately through the report route — that category is triaged ahead of everything else.

We will post any change here and update the date at the top. Where a change materially affects how we handle your data, we will tell you before it takes effect.