Privacy Policy

apartment1. Who is responsible

AppLooma LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM, United States, is responsible for personal data processed through svgamaker.com and the SVGA Maker studio. Contact: [email protected].

database2. Information we collect

• Account details — email address, name, password (stored hashed) and optional profile details you choose to add (photo, date of birth, country, gender).
• Your content — files you upload, prompts you write, and the gifts, themes and other Assets you generate and store.
• Payment and transaction data — what you bought, when, the amount, payment method type (card or crypto), order and subscription status. Card details are collected and processed by Stripe; we never receive or store your full card number. For crypto payments we record the coin, network, amount, transaction hash and the sending wallet address, which we need to confirm payments and process refunds.
• Technical data — IP address, browser and device type, timestamps and basic logs needed for security, fraud prevention and reliability.
• Support messages — emails you send us.

manufacturing3. How we use it

• To run the Service: generate and convert files, manage your credits, subscription and Vault, and save your work.
• To process payments, refunds and chargebacks, and to keep records required for tax and accounting.
• To send account and transactional emails (verification codes, receipts, renewal reminders, service notices). We send marketing emails only with your consent, and you can unsubscribe any time.
• To protect the Service and our users: fraud prevention, bot protection and abuse detection.
• To improve the Service using aggregated, de-identified usage data.

share4. Service providers we share data with

Each provider receives only what it needs for its task and may not use your data for its own advertising:

• Stripe, Inc. — card, Apple Pay and Google Pay payments, fraud checks and receipts (stripe.com/privacy).
• NOWPayments — processing cryptocurrency payments made through its checkout (it receives the order ID, amount and payment details).
• TronGrid / the TRON network — we read public blockchain data to confirm direct USDT (TRC-20) payments. Blockchain transactions, including sending addresses, are public and permanent by nature.
• Google, ByteDance and Alibaba — AI generation engines that receive your prompts and reference media to create your Assets.
• Cloudflare — hosting security, content delivery and file storage.
• Resend — delivery of our emails.
• Google Sign-In — optional social login.

We may also disclose data if required by law, to enforce our Terms, or as part of a merger or sale of the business (with notice to you). We never sell your personal data.

public5. International transfers

AppLooma LLC is based in the United States and our providers operate servers in several countries. Your data may be processed outside your country. We rely on our providers' standard contractual safeguards for these transfers.

schedule6. Data retention

• Account data: while your account is active, and deleted within 30 days after you ask us to close it.
• Uploaded source files: only as long as needed to process your job.
• Stored Assets: while your account (and, for Vault storage, your subscription) is active, plus 30 days after a subscription ends.
• Generated files on a free account: 7 days, then permanently deleted.
• Payment and transaction records: up to 7 years, as required for tax, accounting and chargeback handling.

lock7. Security

All traffic is encrypted with TLS, passwords are stored with strong one-way hashing, payment card data is handled only by Stripe (PCI DSS Level 1), and access to production systems is restricted and logged.

cookie8. Cookies

We use essential cookies to keep you signed in, protect forms from bots and remember your language. Stripe sets its own cookies on checkout pages to prevent fraud. We do not use advertising cookies.

person_remove9. Your rights

You can ask to access, correct, export or delete your personal data, or object to certain uses. Email [email protected] from your account email and we will respond within 30 days. Depending on where you live (for example the EU, UK or California), you may have additional rights, including the right to complain to your local data-protection authority.

child_care10. Children

The Service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

update11. Changes to this policy

If we make material changes we will update the date above and, where appropriate, notify you by email.