Privacy Policy
Last updated: October 2, 2026
DedgoroArt (“DedgoroArt”, “we”, “us”) is an AI image-generation and social-publishing tool at dedgoro.art, operated by an individual operator (sole proprietor). This policy explains what personal data we collect, why, who we share it with, and the choices you have. Questions: support@dedgoro.art.
1. Information we collect
Account & identity
We use Clerk for sign-in. When you create an account we receive your email address, your name or username, and (if you use a social login such as Google) the basic profile your provider returns. We store your account identifier, email, and display name to operate your account.
Content you create
We store the prompts you write, the images you generate, generation settings and metadata (model, seed, dimensions, timestamps), your selections, drafts, and your publishing history. Generated images are stored in private cloud storage and served to you over an encrypted connection.
Comments
When you comment on a post, we store the text, when you wrote it, which post and which comment it answers, and who liked it. Comments are public: anyone who can see the post can read them, with your username and picture. When you edit a comment we keep only the new text. When you delete a comment it is removed; if other people had already replied to it, a “Comment removed” line stays in its place, without your name or the text.
Messages
When you send a message we store its text, when it was sent, and who it was to. Only you and the other person can read a conversation. Our staff never read conversations on their own: when one of the two people reports a conversation, a copy of its last 20 messages is attached to the report, and that copy is the only thing a moderator sees. We also store who you blocked and your “Who can message me” choice.
Pictures you upload to start from
When you upload a picture to start a new one from, we keep a copy we make ourselves: turned upright and resized, with the location, camera and other details that came with the file removed. It is stored privately and checked automatically for content we don’t allow; some pictures are refused. We also record that you confirmed you have the right to use it and, if it shows people, that they agreed. An upload that no generation used is deleted after 24 hours.
Questions to the in-app assistant
When you ask the in-app assistant a question, we store the question, the answer, the page you were on, the model you had selected and your thumbs rating, so we can improve the help pages. For signed-in members these records are linked to the account and deleted with it. For visitors they are kept under a code that changes every day and cannot identify you. The assistant reads only our help pages and what is on your current screen (on the Generate page that includes the prompt you are writing), never your images.
Connected social accounts
If you connect a Bluesky, Instagram, or X account, we store the access credentials needed to publish on your behalf. These are encrypted at rest and are used for two things only: the publishing actions you request, and reading back the public engagement figures — likes, replies, reposts and the equivalents each platform reports — for posts we published for you. Those figures are already public on the platform; we read them so you can see how a post did without leaving the app, we store the counts alongside the post, and we refresh them automatically from time to time rather than only when you ask. We never read your feed, your followers, your messages, or anyone else’s posts. You can disconnect an account at any time, which deletes the stored credentials.
Usage & technical data
Like any web service, our hosting providers process standard technical data such as IP address and request logs for security, rate-limiting, and reliability. We do not use third-party advertising or cross-site tracking.
2. How we use your information
- To provide the service — generate, store, organize, and publish your images.
- To publish content to your connected accounts, only when you instruct it.
- To read back public engagement figures for posts we published for you, including on an automatic refresh, so your post history shows how each one did.
- To secure the service, prevent abuse, and enforce usage limits.
- To respond to your support requests.
- To comply with legal obligations.
We do not train AI models on your images or prompts, and we do not sell your personal data. Your generated images are yours — see our Terms and Trust & Safety pages.
3. Service providers we share data with
We use the following processors to run the service. Each receives only the data needed for its function and is bound to protect it:
| Provider | Purpose |
|---|---|
| Clerk | Account sign-in and identity |
| Neon | Application database (hosted in the EU) |
| Cloudflare R2 & CDN | Image storage and delivery |
| Render | Backend / API hosting |
| Vercel | Website hosting |
| Freemius | Payments. Freemius is the merchant of record and handles checkout — your card details go to them and their payment processors, never to us |
| Sentry | Error diagnostics, so we can find and fix crashes. Configured not to collect IP addresses, cookies, or request bodies |
| PostHog (EU) | Product analytics — which features get used, so we can improve them. Sent from our servers, never from your browser, so it stores nothing on your device. We send your account identifier and facts about the action (for example which model, how many images). We never send your prompts, your images, or your email address |
| GitHub | Runs our automated daily database backup; the backup passes through their build service on its way to our own encrypted storage |
| RunPod | GPU compute that generates your images, including images started from a picture you chose |
| Hive | Automated safety checks: pictures you upload (a profile picture, a video frame, a picture to start from) and the images you generate are checked for content we don’t allow |
| OpenRouter | Vision AI for the optional “suggest caption” feature (an image is sent only when you click it), and the language model behind the in-app assistant (your question, the help text it needs and a description of your current screen are sent when you ask) |
| Cloudinary | Temporary public image hosting required to publish to Instagram |
| Bluesky, Instagram (Meta), X | The platforms you choose to publish to |
4. Cookies and local storage
We do not use advertising cookies, marketing cookies, or any cross-site tracking, and no analytics script runs in your browser. Everything below is stored because the service cannot work without it. We do measure how the product is used, but those measurements are sent from our own servers (see PostHog in section 3) and place nothing on your device.
| What | Why | Set by |
|---|---|---|
Sign-in cookies (__session, __client, __client_uat) | Keep you signed in and protect the session. Clearing them signs you out. | Clerk |
| Browser local storage | Holds your unsaved prompt draft and interface preferences on your own device, plus a cached copy of the sign-in configuration. We do not read it from our servers. | DedgoroArt, Clerk |
Session storage (dg:ref) | The tag from the link you arrived by — for example ?ref=ig — so we know which invitation worked. It is the tag only, never the address of the site you came from, and it is kept for this browser tab. If you create an account, the tag is saved once with it and never changed afterwards. | DedgoroArt |
Because all of it is strictly necessary to deliver the service you asked for, we do not show a cookie consent pop-up — there is nothing optional to agree to, and a banner asking permission for essential cookies would only be theatre. If we ever add analytics or any other non-essential cookie, we will ask for your consent first and give you a way to refuse.
You can clear or block cookies in your browser settings at any time. Blocking the sign-in cookies means you will not be able to log in.
5. Publishing to social platforms
When you publish, the selected images and caption are sent to that platform through its official API, using the account you connected. Once content is on a third-party platform, that platform’s own privacy policy and terms govern it. We only act on your explicit instruction.
6. How long we keep data
- Generated images & prompts: until you delete them. Deleted images go to trash and are permanently removed after a retention window (default 7 days).
- Pictures you upload to start from: 24 hours if no generation used them; otherwise until you delete your account, because the images made from them link back to them.
- Comments: until you delete them, the post they are under is withdrawn or removed, or you delete your account.
- Messages: until you delete your account. “Delete conversation” removes a conversation from your list only; the other person keeps their copy. When an account is deleted, its messages are deleted; the other person keeps the conversation without them. A report’s copy of messages is kept with the report.
- Account data: until you delete your account.
- Social credentials: until you disconnect that account or delete your account.
- Assistant questions: members’ questions until they delete their account; visitors’ questions are stored under a daily code that cannot be traced back to them.
7. Your rights & choices
Depending on where you live (for example under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:
- Delete individual images in the app at any time.
- Disconnect any social account in the app at any time.
- Delete your account and all associated data — see Data Deletion.
- Contact us at support@dedgoro.art to exercise any of these rights.
8. Security
Data is encrypted in transit (HTTPS). Social-account credentials are encrypted at rest. Your original images are kept in private storage and served only through short-lived, signed links to your authenticated session. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.
9. International data transfers
Our primary database is hosted in the European Union (Frankfurt). Some providers listed above operate in the United States or other regions, so your data may be processed outside your country. Where required, such transfers rely on appropriate safeguards.
10. Children
The service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy as the product evolves. We will revise the “last updated” date above and, for material changes, take reasonable steps to notify you.
12. Contact
For any privacy question or request, email support@dedgoro.art.