Legal
Privacy Policy
Last updated: Effective 3 July 2026
This policy explains what data you.bot collects, how we use and share it, how long we keep it, and the rights you have. It applies to our website, dashboard, and API.
1. Who we are
you.bot is operated by Glory Forever Public Company Limited, the data controller for the information described here. For any privacy request or question, contact us at [email protected].
2. What we collect
Account details you provide (name, email) and, for Google sign-in, the basic profile Google returns; API usage metadata (model called, timestamps, credit cost, status); billing and top-up records; and limited technical data (IP address, user agent) captured in security and request logs. We do not sell your personal data.
3. Prompts & generated content
To fulfil a request, the inputs you submit (prompts, and any reference images, audio, or video) are forwarded to the third-party model provider that runs the model you chose. We keep task records for logging, support, and billing, and host result files for a limited delivery window before their links expire.
4. How we use your data
To provide and operate the service, authenticate you, meter and bill credits, prevent abuse and fraud, provide support, and meet legal obligations. We do not use your prompts or generated content to train our own models.
5. Legal basis
Where laws such as the GDPR apply, we process personal data to perform our contract with you (operating the service and billing), for our legitimate interests (security, fraud prevention, and improving the service), with your consent where required (such as non-essential analytics), and to comply with legal obligations.
6. Cookies & analytics
We use essential cookies for authentication (your session) and preferences such as theme, and store an anonymous visitor id plus the campaign or referring site that first brought you here (so we understand which channels our customers come from). We also use Google Analytics to measure how the site is used; it sets its own analytics cookies. You can opt out of analytics at any time — via the Decline option in our cookie notice, your browser's cookie settings, or Google's opt-out tools. We do not run advertising networks or cross-site tracking.
7. Who we share with
The upstream model provider needed to complete each generation; our payment processor to handle top-ups; and infrastructure providers that host the service. We may also disclose data where required by law or to protect our rights. Each processor is bound by its own terms and handles data on our instructions.
8. International transfers
Model providers and infrastructure we rely on may process your inputs and account data in other countries. Where required, we put appropriate safeguards in place for such transfers.
9. How long we keep it
Account data is kept while your account is active. Usage and billing records are retained as needed for accounting and legal requirements. Generated result files are temporary and expire after their short delivery window. You can request earlier deletion as described below.
10. Security
API keys are stored hashed (never shown again after creation), secrets are encrypted in transit and at rest, sessions expire, and result URLs are served through opaque, time-limited tokens. No system is perfectly secure, but we work to protect your data.
11. Your rights
You can access and export your usage logs, rotate or delete API keys, and request correction or deletion of your account and personal data at any time — from the dashboard or by contacting us. Depending on where you live, you may have additional rights under laws such as the PDPA or GDPR, including the right to lodge a complaint with your data-protection authority (such as Thailand's PDPC or an EU supervisory authority).
12. Communications
We send service and security notices related to your account. If we send product or marketing emails, each one includes an unsubscribe link and you can opt out at any time.
13. Children
The service is intended for users aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18.
14. Changes
We may update this policy; the effective date above will change and material updates will be announced in-product. Continued use after an update means you accept the revised policy.