This Privacy Policy explains how Mynth ("Mynth", "we", "us"), the operator of mynth.io and its API, SDKs, and dashboard (the "Service"), collects, uses, and shares information. It should be read together with our Terms of Service.

We try to collect as little as we need to run the Service well. Most importantly, we treat the creative work you do on Mynth as yours and private — see Your prompts & images.

Account information

When you sign up, we (through our authentication provider) collect your email address and basic profile details, and the authentication identifiers needed to keep you signed in.

Billing information

When you add credits, our payment provider (Stripe) processes your payment. We receive limited billing metadata such as the amount, status, and a customer/transaction reference. We do not receive or store your full card number.

Usage and technical data

We collect operational data needed to run and secure the Service: API requests, which models and features you use, credit consumption, timestamps, request/response metadata, IP address, and device/browser information. We use this for billing, rate limiting, debugging, security, and improving the Service.

Content you submit

To perform a generation we process your Inputs (prompts, parameters, reference files) and the Outputs (generated images). How we handle these is described in Your prompts & images.

Communications

If you email us or reach us on Discord, we keep that correspondence so we can support you.

• To provide, operate, and maintain the Service and process your generations.
• To handle billing, credits, and payments.
• To secure the Service — preventing fraud, abuse, and violations of our Terms.
• To debug, monitor, and improve reliability and performance.
• To respond to your support requests and send essential service notices.
• To comply with legal obligations and protect people from serious harm.

We process your Inputs and Outputs to provide the Service — for example, to run a generation, return and store the result, deliver it to your chosen destinations, and show your history. We do not sell your content or use it to train our own or third-party models.

Content may also be processed for content rating you request, provider safety systems, troubleshooting and security, investigating reported or detected abuse, enforcing our Terms, and complying with law. Access by Mynth personnel is limited to situations where it is reasonably necessary for those purposes.

Abuse and legal compliance

If we become aware of a suspected violation, we may review and preserve relevant account, request, and content data; restrict access; remove content; and disclose information where required by law. See our Terms of Service.

Features like Magic Prompts (prompt enhancement) and automatic size selection use large language models. We route these requests through OpenRouter and the model provider selected for the request. OpenRouter and those providers may process and retain data under their own terms and privacy policies.

Mynth does not use prompt text for advertising, marketing profiles, or model training. It is otherwise processed only for the purposes described in section 4.

Image generation is carried out by third-party model providers (for example, the providers behind the models listed in our catalog). To fulfill your request, your relevant Inputs are sent to the provider that hosts the model you selected, and the Output is returned to us and to you.

Each provider operates under its own privacy and content policies, which may differ from ours and may include logging, retention, automated safety analysis, or content filtering. A request may be sent to an alternate provider if an earlier attempt fails. We encourage you to review the policies of providers whose models you rely on.

We use a small set of trusted vendors to run the Service. They process data on our behalf for the purposes described above:

• Authentication — for sign-in and account management.
• Cloud hosting & backend — for running the application, database, and image storage/delivery (including a CDN).
• Stripe — for payment processing.
• OpenRouter — for the language-model features described above.
• Image model providers — for generating images, as described in section 6.
• Product analytics — for understanding usage and improving the Service.

We use strictly necessary cookies to keep you signed in and to operate the Service. We also use privacy-conscious product analytics to understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling necessary cookies may break sign-in.

We keep personal data for as long as needed to provide the Service and for legitimate business and legal purposes — for example, account data while your account is open, and billing records for as long as the law requires. Task records may include prompts, settings, result URLs, and errors. Images stored by Mynth may remain available until they are removed as part of service operations or a valid deletion request. You should keep your own copies. During the alpha, data may be cleared at any time and may be removed after the alpha ends.

We do not sell your personal data. We share it only:

• with the service providers listed above, to operate the Service;
• when required by law, or to comply with legal process, or to protect the rights, safety, and security of users, the public, or Mynth — including the child-safety disclosures described in section 4;
• in connection with a business transfer (such as a merger or acquisition), subject to this Policy.

We take reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Protect your account and API keys, and let us know promptly if you suspect a problem.

We and our service providers may process data in countries other than where you live, including outside the European Economic Area. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by law.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the EEA, you may also lodge a complaint with your local data protection authority.

To exercise any of these rights, email mynth@mynth.io. We may need to verify your identity before acting on a request.

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you. Continuing to use the Service after changes take effect means you accept the updated Policy.

Questions or requests about your privacy? Email us at mynth@mynth.io. See also our Terms of Service.