Labnana Privacy Policy

1. Who We Are and Scope

Labnana is operated by MARSWAVE PTE. LTD., a company incorporated in Singapore. This Policy applies to information that we control in connection with the Service. A third-party website or service that you visit or connect to Labnana may process information under its own privacy policy.

Our data protection and privacy contact is support@marswave.ai. You may use this address for questions, complaints, and privacy-rights requests.

2. Information We Collect

Depending on how you use Labnana, we collect:

• Account and profile information. This includes your email address, display name, profile image, account and authentication identifiers, sign-in provider information, language, preferences, and account status.
• User content. This includes prompts, uploaded reference images or videos, selected source material, generation settings, generated images and videos, thumbnails, titles, visibility choices, favorites, and related metadata.
• Payment and subscription information. This includes plan, credit balance, transaction, subscription, currency, receipt, and payment-status records. Stripe handles checkout and complete payment-card details; we do not directly receive your complete card number.
• Connected-service information. If you connect a third-party account, we receive the identifiers, access tokens, profile details, content, and permissions that you authorize the third party to provide.
• Communications. We collect information you send in support requests, feedback, complaints, and other messages.
• Technical and usage information. This can include IP address, browser and device information, timestamps, referral pages, request and diagnostic logs, identifiers stored in cookies, feature interactions, model selections, generation status, security signals, and approximate location inferred from IP address.

Please do not upload confidential information, government identifiers, medical records, financial credentials, or other highly sensitive personal data that is not needed for a generation request. If your content identifies another person, you are responsible for having the rights and permissions needed to submit it.

3. How We Use Information

We use information to:

• create and secure accounts, authenticate users, and remember settings;
• process prompts and reference material, route requests to the selected AI model, generate content, and deliver or store results;
• provide generation history, sharing and visibility features, favorites, downloads, and customer support;
• administer credits, purchases, subscriptions, receipts, and refunds;
• monitor performance, diagnose failures, measure product usage, and improve the reliability and usability of the Service;
• moderate content, prevent fraud and abuse, enforce our terms, and protect users, MARSWAVE, and the public; and
• comply with law, respond to lawful requests, keep required records, and establish or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations, as appropriate for the activity.

4. How We Disclose Information

We disclose information only as reasonably necessary for the purposes described in this Policy, including to:

• AI generation providers. The Service sends the prompt, selected reference material, generation settings, and related request information to the provider that performs the generation. Depending on the model you select, providers or delivery partners may include Google, OpenAI, ByteDance, Alibaba Cloud, and other providers identified in the Service.
• Infrastructure and operations providers. Cloud hosting, storage, content delivery, email, logging, monitoring, customer support, and security providers process information to operate and protect Labnana.
• Analytics providers. Google Analytics and related tools process device, cookie, account, and usage information to help us understand Service performance and use.
• Payment providers. Stripe processes checkout, payment, subscription, and billing information and returns transaction and status records to us.
• Authentication, connected-service, and content-safety providers. These providers process the information needed to sign you in, connect an account, verify requests, or detect prohibited content and abuse.

We may also disclose information when required by law, to protect rights and safety, with your direction or consent, or as part of a merger, financing, acquisition, reorganization, or sale of assets. We do not sell personal information for monetary consideration. Where required, we use contractual or other safeguards for service providers and international transfers.

5. Pinterest and Other Connected Services

When a Pinterest connection is available and you choose to connect it, Labnana uses OAuth authorization rather than asking for your Pinterest password. We may process your Pinterest account identifier, authorized Board and Pin information, access and refresh tokens, and the Pin media that you select as reference material. We request only the permissions presented on the authorization screen and use that information to provide the connected feature to you.

The Pinterest connection is designed to be read-only. Labnana does not use it to create, edit, or delete Pins, Boards, or your Pinterest profile. When you ask Labnana to generate content using selected Pin media, that media and your prompt may be transmitted to the AI generation providers described above to fulfill your request. This is not local-only processing.

We do not use information obtained through Pinterest to train or fine-tune artificial-intelligence or machine-learning models, build advertising profiles, or target advertising. Any Pinterest information we retain, together with generated results, is handled under Section 7 based on the feature used, account history, security, support, and legal needs.

You can stop future access by disconnecting the integration in Labnana when that control is available, revoking access in the connected service, or contacting us. Revocation stops future API access but does not by itself erase generation history, transaction records, security records, or information that must be retained by law. You may separately request deletion as described in Section 9.

6. Cookies and Analytics

Labnana uses cookies and similar browser storage for sign-in, security, language and product preferences, and analytics. Google Analytics may set or read identifiers and receive account and usage attributes associated with Service events. You can limit cookies through your browser settings, but blocking authentication or preference cookies may prevent parts of Labnana from working.

Some browsers send “Do Not Track” signals. Because there is no uniform standard for these signals, the Service may not respond to them in every context. We will provide additional consent or opt-out controls where applicable law requires them.

7. Data Retention

We retain information for as long as reasonably necessary to provide the Service and for the purposes described in this Policy. The period varies by data type and context:

• account and profile information is generally retained while your account is active and afterward as needed for security, disputes, account recovery, and legal obligations;
• prompts, reference material, generated content, and associated task history may remain until you delete them, close the account, or ask us to delete them, subject to the exceptions below;
• connected-service credentials are retained while needed to keep the connection active, until they expire, are revoked, or the connection is removed;
• billing and transaction records are retained for accounting, tax, fraud prevention, dispute resolution, and legal obligations; and
• logs, analytics, security records, and backups are retained for operational, security, recovery, and legal periods.

Deletion may first remove information from active product views. Residual copies can remain in backups, security records, provider systems, or records we must keep until their applicable deletion cycle or legal retention period ends. We delete or de-identify information when it is no longer reasonably needed, subject to technical and legal requirements.

8. International Data Transfers and Security

MARSWAVE is based in Singapore. We and our providers may process information in Singapore, the United States, and other countries where our providers operate. Those countries may have different data-protection laws. Where required, we use contracts and other measures intended to provide protection comparable to applicable law.

We use reasonable administrative, technical, and organizational measures designed to protect information. No Internet transmission, cloud-storage system, access control, or security measure is completely secure, so we cannot guarantee absolute security.

9. Your Privacy Rights and Choices

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, or deletion of personal information; receive information about how it was used or disclosed; obtain a portable copy; restrict or object to certain processing; withdraw consent; or complain to a data-protection authority.

To make a request, email support@marswave.ai with the subject “Privacy Request.” Tell us the account email and the request you want to make. We may need to verify your identity. We will respond within the period required by applicable law or tell you if additional time is permitted and needed.

Withdrawing consent or deleting information may prevent us from providing some or all of the Service. We may retain information where applicable law permits or requires it, including for security, fraud prevention, transactions, disputes, and legal claims.

10. Public Content and Third-Party Links

Content you choose to make public may be displayed to other people, indexed, copied, or shared outside Labnana. Files and generated media are delivered through cloud storage and content-delivery systems. Do not publish or upload content that you do not want processed in that way.

Labnana may link to services we do not control. Their privacy and security practices are governed by their own policies.

11. Children

Labnana is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age, the Service may be used only with valid authorization from a parent or guardian. Contact us if you believe a child submitted information in violation of this section.

12. Changes to This Policy

We may update this Policy as Labnana, our providers, integrations, or legal obligations change. We will post the revised Policy here and update the date above. If a change is material, we will provide additional notice where required by law.

13. Contact Us

For privacy questions, complaints, or requests, contact the MARSWAVE data protection and privacy contact at support@marswave.ai.