Advelum

Privacy Policy

Last Updated: September 21, 2026

1. Overview

This Policy explains how advelum.com, operating under the Advelum brand, processes personal data when you use our accounts, image and video ad tools, billing features, and support channels (the "Services"). References to "Advelum," "we," "us," and "our" mean advelum.com as the service operator. We are responsible for decisions about personal data used for our website, accounts, billing, support, and generation services and act as the controller for that processing where applicable data-protection law uses that term. For privacy questions and requests, contact support@advelum.com.

Applicable rights and obligations depend on your location and our role in the relevant processing. This Policy describes data use; it does not make all processing depend on a blanket consent obtained simply by visiting the website.

2. Information We Process

Account and Support Information

We process account identifiers, your email address, name and profile image where provided, authentication records, and communications with support. Email/password sign-up involves storing a protected password representation. When you use third-party sign-in, we receive the account information authorized through that flow, such as an identifier, email address, name, and profile image; we do not receive your password for that provider.

Prompts, Media, and Generation Records

We process your prompts, product images, reference images or videos, optional logos, requested ad copy, generation settings, and generated files. We also record task status, model/provider identifiers, credit quotes and usage, errors, moderation results, and feedback needed to deliver and support the service.

Inputs may contain personal data about you or others. You should only upload material you are entitled to share and process. Do not submit unnecessary sensitive or confidential information.

Payments and Credits

We process order and transaction identifiers, purchase amounts and currency, payment status, credit balances and movements, refunds, and disputes. If you purchase an available subscription, we also process plan, renewal, cancellation, and allocation records.

Our payment service providers process payment details. We receive limited payment and risk information relevant to transactions, which may include a payment-method fingerprint and billing metadata. We do not store complete payment-card numbers or card security codes in our application database.

Technical, Security, and Usage Information

We process IP addresses or network identifiers, approximate location derived from network information, browser information, timestamps, session identifiers, request logs, errors, and feature activity. Account-protection checks may also use email-domain information, hashed email identifiers, network organization or ASN, authentication outcomes, registration methods, and automated risk reasons.

These records help us prevent account abuse, payment fraud, unauthorized access, and misuse of promotions, and help us diagnose failed requests. Technical or billing identifiers may still be personal data even when they are not a name or email address.

3. Purposes and Legal Bases

We use personal data to:

  • create accounts and provide authentication;
  • accept uploads, submit generation tasks, deliver results, and maintain creation history;
  • quote, reserve, charge, and release credits, and process purchases or available subscriptions;
  • deliver verification, recovery, billing, and other necessary service emails;
  • moderate content and investigate abuse, security incidents, payment disputes, and technical problems;
  • respond to support, privacy, and legal requests; and
  • maintain records needed for accounting, legal compliance, and the establishment or defense of legal claims.

We may use limited operational data to understand service performance and improve reliability and usability. We do not use your Inputs or Outputs to train an Advelum-owned generative model. Third-party generation and moderation processing is described below.

Where EU, EEA, or UK data-protection law applies, the relevant legal basis may be contract performance, compliance with a specific legal obligation, legitimate interests in service security and operation, or consent where required for an optional purpose. We consider applicable rights when relying on legitimate interests. You may withdraw consent to processing that relies on it without affecting earlier lawful processing.

4. AI Providers, Service Providers, and Data Sharing

We share relevant personal data with providers that support the Services, including cloud hosting and storage, authentication, payment processing, email delivery, technical support and monitoring, AI generation, and content moderation. The data involved depends on the function you use. Providers may process prompts, uploaded files, generation settings, outputs, and associated account or task information to deliver and support that function.

The categories of recipients and the data they process include:

  • Cloud hosting, storage, and infrastructure providers: account information, uploaded media, generated results, task records, and technical data needed to host, store, and operate the Services.
  • Authentication and account-security providers: identifiers, account information authorized through third-party sign-in, and technical signals needed to authenticate users and prevent abuse.
  • Payment and billing providers: payment details, checkout and transaction records, refunds, disputes, and related fraud-prevention information.
  • AI generation and model providers: prompts, product and reference media, optional logos, output settings, and task information needed to generate results or provide requested prompt and image assistance.
  • Content-moderation providers: relevant text, images, videos, temporary processing copies, task identifiers, and review results needed to assess content safety.
  • Email and support-delivery providers: email addresses, necessary account or transaction details, service messages, and support communications needed to deliver notices and handle requests.

For video-reference generation, the complete reference video is made available to the external generation service together with the relevant product images and instructions. We do not limit that transmission to extracted still frames. Generated content may also be submitted to content-moderation providers for review.

When providers process personal data on our behalf, that processing is for the relevant service purposes and is subject to the instructions and terms applicable to the service. We do not authorize service providers to use personal data received through our Services for their own independent direct marketing to you. Some providers, including payment and identity providers, may also act independently for their own legal, security, or account-management purposes. Their processing and retention are governed by the arrangements and terms applicable to the services used.

We may share information with authorized personnel and advisers as needed for support, security, accounting, or legal matters. We may also disclose information when lawfully required, to protect rights and safety, or in connection with a business transfer subject to applicable safeguards and notice requirements.

We do not sell your personal data for money. If we introduce a use that constitutes a regulated sale, sharing for targeted advertising, or another processing activity requiring a choice, we must provide the applicable notice and controls before that use.

5. Media Access and Sharing

Your uploads and creations are not automatically displayed in a public gallery. Access to account pages is restricted, but some media is delivered through links that can be opened by anyone who has the complete URL. Such links may be provided to generation or moderation services so they can process your task.

A media link is not equivalent to access-controlled private storage. Avoid sharing links unintentionally or uploading material that requires a stronger confidentiality arrangement. Copies that you or others download or distribute are outside our direct control.

6. Cookies and Similar Technologies

We use cookies or browser storage for authentication, security, account preferences, and locally saved creation drafts. We may also record limited attribution or service activity to understand visits and task delivery. Clearing browser storage can remove local drafts and preferences; it does not erase server-side accounts or billing records.

Optional third-party analytics and advertising tracking are not enabled in the current release configuration. Authentication and security checks are separate from optional analytics.

If optional analytics or advertising technologies are enabled in a later release, we will update this notice and provide the choices required by applicable law, including prior consent where necessary and a way to change that choice. We do not describe a cookie banner or an opt-out control as available when it is disabled.

You can manage browser cookies and storage in your browser settings. Blocking essential storage may prevent sign-in or other requested functions. You may contact us about applicable privacy or opt-out rights, including questions about browser privacy signals.

7. Retention and Deletion

We retain information for the purposes described in this Policy, using the following criteria:

  • Account information: for account operation and support while the account remains active, followed by any period necessary to address closure, disputes, security, or legal obligations.
  • Uploaded media and generated results: retained for 30 days from when each file is stored for task processing, viewing, downloads, moderation, and support. Uploaded files and generated results have separate retention periods. Expired media is no longer available through account queries, previews, downloads, or reuse.
  • Billing, credits, and disputes: for the periods needed to maintain accurate balances, resolve transactions and disputes, and comply with applicable accounting and legal requirements.
  • Security, support, and operational records: for as long as needed to investigate incidents, resolve requests, prevent recurring abuse, and meet applicable recordkeeping obligations.
  • Temporary provider copies: subject to the purpose of the generation or moderation task and the applicable provider's retention arrangements.

Media files in our cloud storage are scheduled for automatic deletion after 30 days using object lifecycle rules. Physical deletion is asynchronous and may complete after the access period ends. This media retention period does not delete account details, generation usage records, credit ledgers, or billing records. It also does not control third-party processing copies, legal preservation requirements, or copies you or others have downloaded. Keep your own copies of results you need before expiry.

Deleting a creation from your library removes its account listing and initiates removal of the stored result. It does not automatically delete independently uploaded sources, transaction and credit records, copies already downloaded by others, or every record held by a provider. Retention may continue where necessary for legal obligations, security, or legal claims.

Contact support to request account closure or deletion of other personal data, or to ask about retention for a particular category. We will assess the request and applicable exceptions. If you have an active subscription, you can cancel future renewals in Billing or include that request when contacting support about account closure.

8. International Processing

Your information may be processed outside your country, including in the United States and other jurisdictions where our service providers operate. Processing locations depend on the provider and the service involved.

Where applicable law requires safeguards for a cross-border transfer, the transfer must be supported by an appropriate legal mechanism, such as a recognized adequacy decision, applicable contractual protections, or another lawful safeguard. Contact support@advelum.com to request information about the processing locations and safeguards applicable to your data, including how to obtain relevant information or copies where available under applicable law.

9. Security and Automated Decisions

We use authentication, access controls for account functions, transport security, and other measures designed to protect the Services. No system guarantees complete security. The media-link access described above remains relevant even when transport is encrypted.

Automated security or moderation checks may affect registration benefits, access, or delivery of a generation. They can produce errors. Contact support if you believe a restriction or moderation decision is incorrect. Where applicable law gives you additional rights concerning automated processing, you may request their exercise.

10. Your Rights

Depending on applicable law and the processing involved, you may have rights to access, correct, delete, or receive a portable copy of personal data; restrict or object to certain processing; withdraw consent; or exercise applicable sale, sharing, or targeted-advertising opt-outs. Where applicable, you may complain to a competent data-protection authority or other regulator.

To make a request, email support@advelum.com with the subject Privacy Request, your account email, country or region, and the action requested. These requests are handled through support; we do not promise that all of them have a self-service account control.

We may request proportionate verification and may limit a request where an applicable exception protects legal obligations, security, legal claims, or others' rights. We will respond within the time required by applicable law. Your objection to processing based on legitimate interests will be considered under the applicable rules.

11. Communications and Children

We send service communications such as verification, password recovery, and transaction notices. If we introduce promotional messages, we will provide the required consent and unsubscribe arrangements. Opting out of promotions does not stop necessary account or transaction messages.

The Services are not directed to children under 13 and require the legal capacity described in our Terms of Service. If you believe a child has provided information in violation of applicable requirements, contact us so we can investigate and take appropriate action.

12. Updates and Contact

We will update this notice when our practices change and provide additional notice where required. An updated notice does not replace consent where new consent is legally necessary.

For privacy or legal questions, email support@advelum.com. Our Contact page explains what to include in a request.