Privacy Policy

How we collect, use, and protect your information.

Last updated: February 12, 2026

1. Overview

VariantLab is committed to protecting your privacy. We do NOT sell or distribute your personal information to third parties. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

2. Data We Collect

Account Information

  • Email address (required for account creation)
  • Display name (optional)

Transaction Data

  • Mana purchase history
  • Mana usage logs
  • Token consumption records

Technical Data

  • Session information
  • IP address
  • Browser type and version

Content Data

  • Prompts you submit for image generation
  • Images you generate and upload
  • Project configurations and settings

3. How We Use Your Data

We use your information to:

  • Provide and maintain the Service
  • Process payments and maintain billing records
  • Send transactional emails (receipts, account notifications)
  • Detect and prevent fraud, abuse, and violations of our Terms
  • Comply with legal obligations
  • Improve the Service through aggregated, anonymized analytics

4. Data Shared with Third Parties

AI Model Providers

When you use VariantLab to generate or analyze images, your prompts and images are sent to third-party AI model providers (such as Google for Gemini). You are responsible for reviewing and understanding the privacy policies of the AI models you use through VariantLab.

Payment Processing

We use Stripe to process payments. Your payment information is handled directly by Stripe and is subject to their privacy policy: https://stripe.com/privacy

Cloud Storage

Your images are stored on Google Cloud Storage with encryption at rest and in transit.

5. Cookies & Session Data

We use cookies strictly for:

  • Session authentication and maintaining your login state
  • Remembering your theme preference
  • Anonymous usage analytics (Google Analytics) to understand how visitors use our site. These are first-party cookies and do not track you across other websites.

We do not use third-party tracking cookies or advertising cookies.

6. Data Retention

  • Account data: Retained while your account is active
  • Transaction logs: Retained for 7 years for audit and legal compliance
  • Images: Retained until you delete them or your account is terminated
  • Usage logs: Retained for 90 days for operational purposes

7. Data Security

We implement appropriate security measures to protect your data:

  • Secure credential storage with industry-standard hashing
  • HTTPS encryption for all data in transit
  • Encrypted storage for data at rest
  • Restricted access controls to production systems
  • Regular security reviews and updates

8. International Users

VariantLab is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email to the address associated with your account. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions or concerns about this Privacy Policy or your data, please contact us at: support@variantlab.ai