Privacy Policy

This policy explains what information Flying Car AI (flyingcarai.io) collects, how we use it, and the choices you have. In this policy, "we" and "us" mean Flying Car AI, the operator of flyingcarai.io. If anything here is unclear, email support@flyingcarai.io.

What we collect

• Account details. When you sign up, we collect your email address and, if you use Google sign-in, your name and profile picture from Google. If you sign up with email, we store a secure (hashed) version of your password.
• What you upload and create. The files you upload, the text you write, the options you pick, and the results we create for you.
• Credits and purchases. Your credit balance and order history. Card details are entered on the checkout page of Waffo (Waffo.com Limited); we never see or store your full card number.
• Messages. What you send through the contact form or by email.
• Usage and device data. Pages you visit, buttons you use, approximate location from your IP address, browser and device type, and how you first found the site (such as a search engine or a link) and the first page you opened, which we save to your account when you sign up. Some of this is collected through cookies and local storage, explained in our Cookie Policy.
• Security logs. IP address, time of request and error details, used to keep the service running and to stop abuse.

How we use it

• To provide the service, create your results and show them in your account.
• To run your account, track credits, process payments and send account emails, such as verification, password reset and receipts.
• To check uploads, requests and results against our content rules before and after creation, and to keep records of those checks.
• To answer your messages and handle reports.
• To understand which features people use and fix problems.
• To prevent fraud, spam and misuse, and to meet legal and tax obligations.

We don't sell your personal information, and we don't use what you upload or create to train AI models.

Where the GDPR or UK GDPR applies, we rely on these legal bases: performing our contract with you (providing the service, running your account and billing), our legitimate interests (security, fixing problems, improving the service), your consent (analytics cookies where consent is required), and legal obligations (tax and accounting records).

Who we share it with

We share information only with service providers that help us run the site, and only what they need:

• AI model providers, which receive what you upload and your request to create the result.
• Content safety provider, which checks uploads, requests and results against our content rules.
• Waffo (Waffo.com Limited), which handles checkout, sales tax and fraud checks and acts as the seller of record for your purchase.
• Cloud hosting, storage and security providers (Cloudflare), which serve the site, store data and files, and block attacks.
• Sign-in provider (Google), if you choose Google sign-in.
• Email provider, which delivers account and support emails.
• Analytics providers (Google Analytics and a self-hosted Plausible), which help us measure visits and feature use. Google Analytics uses cookies and receives your IP address and device and page-visit data; where consent is required it runs only after you accept.

We may also share information if the law requires it, to protect people from harm, or as part of a sale or merger of the business, in which case this policy would continue to apply.

How long we keep it

Information	How long
Uploaded files and results in our storage	Deleted automatically after 7 days, or sooner when you delete them
Copies held by AI model providers	Only as long as their own retention policies allow
Records of content checks	Up to 1 year
Account details	Until you delete your account
Order and payment records	As long as tax and accounting law requires, usually 7 years
Contact messages	Up to 2 years after the conversation ends
Security logs	Up to 90 days

Your choices and rights

• Delete files and results at any time from your account.
• Delete your account from your account settings, or email us. We delete your account details and files, and keep only the records the law requires.
• Access, correct or export your information by emailing us.
• Cookies. Where we ask for consent, you can change your cookie choice at any time with the Cookie settings link at the bottom of the page.

Depending on where you live, you may also have the right to object to or limit how we use your information, and to complain to your local data protection authority. California residents can ask what personal information we collected and ask us to delete it; we don't sell or share personal information for cross-context behavioral advertising. We will not treat you differently for using these rights. We answer requests within 30 days.

Where your information is processed

We and our providers process information in the United States and other countries. When we transfer personal information out of the EEA, UK or Switzerland, we rely on the safeguards the law provides, such as standard contractual clauses.

Security

Connections to the site are encrypted, and private files are shared only through short-lived links. No system is perfectly secure, so please use a strong password and tell us right away if you think your account has been misused.

Children

The service is not meant for anyone under 18. We don't knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

Changes

If we change this policy in a meaningful way, we will update the date above and, where required, let you know by email or on the site before the change takes effect.

Contact

Flying Car AI · support@flyingcarai.io · You can also use the contact form.