Privacy Policy

We leverage your data strictly to execute the computational processes you request and maintain the Studio:

• To execute powerful backend AI workflows, including multi-angle generation, lighting correction, and identity matching.
• No Global Model Training: We DO NOT use your private, uploaded customer photography (e.g., proprietary brand assets or personal faces) to train our global foundational AI base models.
• Custom LoRA Training: Training datasets uploaded for your personal Custom LoRA Model are processed solely for your requested model and auto-deleted afterward.

Where applicable under regulations like the GDPR or CCPA, we process your data based on:

• Contractual necessity to render your requested AI images.
• Our legitimate business interests (security, abuse prevention, and quality assurance).
• Your direct consent.

We do not sell your personal information or uploaded imagery. We share data strictly with certified sub-processors required to operate the platform:

• Stripe: Payment processing for subscriptions, credit packs, and custom add-ons.
• Cloud Infrastructure (RunPod, Google Cloud): GPU rendering, AI inference execution, and LoRA model training.
• Email Services: Account verification, password reset, and transactional notifications.

We deploy essential cookies and localized storage to maintain your active login session and persist your un-saved studio setups.

We use a secure, HTTP-only session cookie (fs_session) for authentication.

We retain your personal data and generated image history in your digital Gallery for as long as your account remains active.

• User Control: Deleting an image from your Gallery immediately queues it for secure deletion from server storage.
• Training Datasets: Automatically deleted immediately after LoRA training job completes or fails.
• Trained LoRA Models: Files remain available for download for 7 days, after which they are removed.

Protecting your pre-released product photos and personal likenesses is our priority.

We employ industry-standard encryption protocols (TLS/SSL) during data transit and secure, HTTP-only session cookies with production-grade security settings. However, due to the inherent nature of the internet, no cloud architecture can be guaranteed 100% secure.

Subject to your jurisdiction (e.g., California CCPA, EU/UK GDPR), you possess robust data rights:

• Right to request access to your AI generation histories.
• Right to request correction of account data.
• Right to demand the deletion of your account and assets (Right to be Forgotten).
• Right to withdraw consent for non-essential processing.

To execute any of these rights, please contact our privacy division.

ComfyUIFlows Studio operates on global cloud infrastructure.

Consequently, your data (including uploaded images) may be dynamically routed to international server regions for faster GPU access. We ensure standard contractual clauses and rigorous safeguards are in place for cross-border rendering.

For inquiries regarding your data security, deletion requests, or our AI processing safeguards, please contact us at: