Privacy Policy

Data We Collect

vinegarcreek collects account registration data (email address, age verification confirmation), payment information processed through our third-party payment provider, and usage metadata including generation counts and API call logs.

Source images you upload are processed in memory and deleted from our servers within 60 seconds of generation completion. We do not retain, log, or associate uploaded images with your account in any stored form.

How We Use Your Data

Account data is used to authenticate access, manage your subscription, and communicate service updates. Usage metadata is used to enforce plan limits and monitor for policy violations. We do not sell personal data to third parties.

Cookies

vinegarcreek uses session cookies to maintain your login state and functional cookies to remember interface preferences. Analytics cookies — used to measure page performance — can be declined via the cookie consent panel on your first visit.

We do not use third-party advertising cookies. No cross-site tracking pixels are embedded in any vinegarcreek page. Cookie data is not linked to identifiable user profiles.

Data Sharing

vinegarcreek shares minimal data with service providers necessary to operate the platform — cloud infrastructure providers and our payment processor. Each provider is bound by data processing agreements prohibiting secondary use of your information.

Security Measures

All data transmitted between your browser or API client and vinegarcreek servers is encrypted using TLS 1.3. Account passwords are hashed using bcrypt with a cost factor of 12. Access to production databases is restricted to authenticated internal systems.

No user-uploaded images are written to persistent disk storage at any point in the processing pipeline. The 60-second deletion policy is enforced at the infrastructure level, not solely through application logic.

Your Rights

You may request a copy of all personal data vinegarcreek holds about you, request correction of inaccurate data, or request complete account deletion at any time. Submit requests to info@vinegarcreek.com — responses info@vinegarcreek.com are sent within 5 business days.

Third-Party Links

Some vinegarcreek pages may link to third-party resources. Those sites operate under their own privacy policies. vinegarcreek is not responsible for the privacy practices of any external site.

Data Retention

Account data is retained for the duration of your subscription plus 90 days after cancellation, allowing for dispute resolution. After that window, all personal data is permanently deleted from active and backup systems.

Policy Updates

vinegarcreek may revise this Privacy Policy to reflect changes in law or platform functionality. The updated policy will be posted with a revised effective date. Registered users will receive email notice of material changes at least 14 days before they take effect.