Where do my prompts and uploaded images go?

A generation request carries the material the model needs and nothing else: the prompt text, any reference images, a source video if you are editing one, and the parameters — model, aspect ratio, resolution, duration, seed. That payload is what leaves our servers.

It travels without your identity. Email address, account id, balance and generation history stay in our database, so the request cannot be tied back to you further down the line. Once it leaves, it is handled under the model provider's own terms and retention rules, which we do not control.

Finished images, videos and audio are written to your private account and served over signed links that expire. They are kept for 30 days from generation and then deleted automatically, together with their thumbnails — download anything you want to keep. Deleting a generation yourself puts it in the trash, recoverable for 30 days, after which the files are purged.

Uploaded source videos are removed as soon as the generation finishes, and in any case within 24 hours. The reasoning context that lets you keep editing an image conversationally lives 7 days; after that the picture and the prompts remain, but the editing chain starts fresh.

Every hosted generator sends your input to a model somewhere. Ours is no exception, so material you are contractually required to keep confidential — client source files, unreleased products, personal documents, anything under an NDA — deserves a decision before the upload rather than after.

The practical middle ground is to keep secret material out and describe it instead: generate a synthetic stand-in, or work from assets you are free to share. If a specific job needs a guarantee about where it is processed, ask support before submitting it — that is a conversation we can have, and section 4 of the privacy policy is the text it starts from.