Privacy

Information we process

We process your email, secure account information, submitted briefs, generated results, creator profiles and ideas you choose to save.

We may also record usage, subscription status, technical logs and approximate country. We do not request precise GPS location.

Why and how

We use this information to provide and secure the service, sync content, enforce limits, process payments, and improve quality and reliability.

Your brief, choices and optional images are sent to our AI provider to create the result. Stripe handles payments, Resend account email, and our hosting provider runs the service.

Storage and sharing

We do not sell personal information. We share only what is needed with service providers or where required by law.

Complete generations for signed-in users are kept for 90 days and then deleted automatically. Attached profile images are not saved in history. Account and purchase data is retained as needed for the service, security, accounting and legal obligations. Unsaved drafts may remain locally on your device.

Your choices

Use the account menu to download your data or request deletion. An active subscription must be cancelled before the account can be deleted.

Contact us for access, correction or other privacy requests.

Cookies and analytics

DARUOM uses necessary session and trial cookies, plus local storage for language, drafts and app choices.

When DARUOM is opened, we store one anonymous counting event. When the no-account free generator is used, we also store one anonymous attempt row with a started, completed, failed or cancelled status and timestamps. It contains no guest ID, visitor ID, IP address, brief, images, result, error text, page, country, device or campaign data and is used only for aggregate traffic and feature measurement. The same person may be counted more than once.

Whatever your analytics choice, we also anonymously count whether the builder and pricing are viewed, the idea field is used, generation or a plan is clicked, and account or registration is opened or submitted. These events contain no visitor or account ID, IP address, page, locale, source, country, device, campaign, brief or other content. For a plan click, only the selected plan and monthly or annual interval are stored. The same person and action may be counted more than once.

If you allow analytics, we additionally store a random first-party visitor ID for up to one year and measure page, time, approximate country, device type and limited campaign fields such as UTM source. When attributing a new account or checkout, we look back no more than 90 days; direct returns from a verification email or Stripe do not overwrite a meaningful source. Raw IP addresses, full referrer URLs, ad click IDs and full user-agent strings are not stored in analytics. All analytics events are deleted after no more than 13 months. Change your choice through Analytics choices on the site. We do not sell this data or use it for third-party advertising.

Controller and legal bases

The controller is the service provider identified on the contact page. Send privacy questions to the support address below.

Account, brief and subscription data is processed to perform our contract with you. Accounting and purchase data is processed where required by law. Security logs, abuse prevention, troubleshooting and aggregated quality measurement rely on our legitimate interest in a safe and reliable service. Where consent is required, we ask separately and you may withdraw it.

AI and processors

Your brief, choices and optional images are sent to the Google Gemini API to produce the result. DARUOM does not use your content to train its own AI models. Google’s processing, retention and any use of API data is governed by the applicable Gemini terms and API plan. Do not submit sensitive, confidential or unnecessary personal data.

Stripe processes payments, Resend delivers account and support email, and OpenAI Sites with Cloudflare provides hosting and technical infrastructure. Each receives only the data needed for its role.

Transfers outside the EEA

Some providers may process or temporarily store data outside the EEA. Where required, we rely on a valid transfer mechanism such as an adequacy decision or standard contractual clauses. Contact us for information about relevant safeguards.

Your rights

You may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing.

We respond within applicable statutory deadlines. You may complain to the Norwegian Data Protection Authority or the authority where you live or work.

Support requests

When you use the contact form, we process your email, selected category, subject and message to reply and handle the request. Resend delivers it to our private support inbox, and it is kept only as long as needed for follow-up, security or documentation.