Privacy Policy

How PalaPili handles information, service providers, retention and privacy requests.

Effective date:

Crownbyte Ltd operates PalaPili and is responsible for the personal information described in this policy. Contact support@palapili.com with privacy questions.

Information and purposes

We process information you provide when you use the service or contact us. The information involved depends on the features you use.

  • Account information: name, email address, profile image, sign-in identifiers and session information used to create and secure your account. If you choose social sign-in, the provider shares the profile information needed for that sign-in.
  • Payment records: customer and transaction identifiers, purchases, subscriptions, invoices, payment status and access rights. Stripe handles payment details; we do not store your complete payment card number.
  • Content you submit: information or files you deliberately send through an available upload, publishing or support feature. We use this content to provide that feature. Content you choose to publish may be accessible to other visitors.
  • Support correspondence: your contact details, messages and attachments, used to answer requests and investigate issues.
  • Technical information: request metadata such as IP address, browser information, errors and security events, used to deliver the website, troubleshoot failures and prevent abuse.

Information needed to provide a requested feature may be required for that feature to work. Avoid submitting sensitive information that the service does not ask for.

Creative projects and AI processing

We store project descriptions, prompts, styles, reference media, generated images and videos, version history and credit transactions to provide the creative studio. Projects and asset URLs require authentication and are scoped to their owner; this release does not provide public project sharing.

When you request generation, editing or media understanding, the relevant prompts, reference files, and parameters are sent to the selected AI model providers (including MiniMax, Kling, and other integrated synthesis engines) to produce your requested output. Media understanding results may be cached with the source file to avoid repeating a request. Exported project files contain the project's media and history; keep downloaded copies private if their contents are private.

Why we process information

We use information to provide the service you request, maintain security, respond to support requests and meet legal obligations. Where applicable law requires a legal basis, these purposes rely on performing our agreement with you, our legitimate interests in operating and protecting the service, or a legal obligation. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Service providers and disclosure

The services enabled for this website include the following providers. Their linked policies explain their own processing:

  • Cloudflare: Website hosting, database, file storage and delivery, security, and email delivery where used.
  • Stripe: Payment processing, subscription management and fraud prevention.
  • Google sign-in: Authentication when you choose to sign in with Google.
  • X sign-in: Authentication when you choose to sign in with X (Twitter).
  • Google Analytics: Audience and usage measurement.
  • Microsoft Clarity: Usage analysis, including interaction and session insights.
  • Crisp: Support chat and related conversation records.

We may also disclose relevant information when required by law, to protect legal rights and safety, or in connection with a business transfer subject to applicable protections. We do not sell account or support information.

Data retention

We keep account information while an account is active and as needed to handle closure requests. We retain payment records for applicable accounting, tax and dispute obligations. We keep support correspondence and security records for as long as needed to resolve the issue, prevent abuse and meet legal obligations. When these purposes no longer apply, we delete or de-identify the information.

Storage, security and international processing

Our providers may process information outside your country. The location depends on the services used and their infrastructure. Where transfer protections are required by law, they must apply to that processing. Contact us for information about the safeguards applicable to your data.

We use access controls and other measures intended to protect information, but no internet service can guarantee absolute security. Keep your sign-in details secure and report suspected unauthorized access to support@palapili.com.

Cookies and optional services

The Cookie Policy describes browser storage and how to manage it. Optional analytics, advertising and support-chat services currently configured for the site are listed below:

Your rights and choices

Depending on your location and the processing involved, you may have rights to access, correct, export or delete information, restrict or object to processing, and withdraw consent. Email support@palapili.com to make a request. We may ask for information needed to verify your identity and understand the request. We will respond within the time required by applicable law and explain any lawful limits on the request.

You may also complain to your local data protection authority. Contacting us first can help resolve a concern, but is not a condition of making a complaint.

Children

The service is not directed at children who cannot lawfully consent to its use or enter the required agreement. If you believe a child has supplied personal information without the required authorization, contact us so we can investigate and address it.

Policy changes

We may update this policy as the service or our practices change. We update the effective date on this page and provide additional notice where required. Contact support@palapili.com if you have questions about a change.