Privacy Policy

This Privacy Policy explains how Gullabs (“Gullabs”, “we”, “us”) collects, uses, and shares information when you visit our website or use the Gullabs studio and related services (the “Service”). It should be read together with our Terms of Service.

We collect the following categories of information:

• To provide the Service: authenticate you, run generations, apply your Brand DNA, store your projects, and deliver Output.
• To process payments, manage credits, and send billing notices.
• To operate, secure, debug, and improve the Service, including measuring which features are used and preventing abuse.
• To communicate with you about your account, product updates, and, where permitted, marketing. You can opt out of marketing emails at any time using the link in the email.
• To comply with legal obligations and enforce our Terms.

To fulfil a generation request we send the relevant Inputs (for example your prompt, a product image, or extracted brand attributes) to one or more third-party AI model providers. We only send what is needed for that request, and we contractually require providers not to use your data to train their models where such options are available.

We do not use your Inputs or Output to train models offered to other customers without your explicit consent. We may use de-identified, aggregated statistics about generations to improve the Service.

We use cookies and similar technologies to keep you signed in, remember preferences such as your language, and understand how the website is used. We use privacy-focused analytics to measure page views and performance. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

We do not sell your personal information. We share it only:

• With service providers who process it on our behalf (cloud hosting, AI model providers, payment processing, email delivery, analytics), under contracts that restrict their use of it.
• With your team, if your account is part of a team or organization workspace.
• When required by law, legal process, or to protect the rights, safety, and property of Gullabs, our users, or others.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your information is handled.

We keep your account information and content for as long as your account is active. Uploaded Inputs used only to run a generation may be deleted from processing systems shortly after the request completes; content saved to your projects remains until you delete it. After account deletion we remove or de-identify your data within a reasonable period, except where we must retain it for legal, billing, or security reasons.

We use industry-standard safeguards, including encryption in transit, access controls, and monitoring, to protect your information. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and let us know immediately if you believe your account has been compromised.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area, the United Kingdom, Canada, and California have specific rights under GDPR, UK GDPR, PIPEDA, and the CCPA/CPRA respectively.

You can update most account information and delete projects from within the Service. To exercise other rights, email support@gullabs.com. We will respond within the time required by applicable law and may need to verify your identity first. You also have the right to lodge a complaint with your local data-protection authority.

Gullabs is based in Canada and uses service providers in other countries, including the United States. Your information may be transferred to and processed in countries whose data-protection laws differ from your own. Where required, we use appropriate safeguards such as standard contractual clauses for these transfers.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date and, for material changes, notify you by email or within the Service.

Privacy questions or requests: email support@gullabs.com or use our contact page.