Privacy Notice

1. Scope and controller

This notice explains how Audity Labs LLC, doing business as Lenscap (“Lenscap,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information through the Lenscap website and creative service. Audity Labs LLC is the controller of personal information covered by this notice. This notice does not govern a third-party service you use independently of Lenscap.

2. Information we collect

Depending on how you use Lenscap, we collect:

• Account and contact information: name, email address, profile image, authentication identifiers, account age affirmation, onboarding answers, support messages, and preferences.
• Billing information: Stripe customer, subscription, invoice, payment-status, refund, dispute, tax, and credit-ledger records. Lenscap does not store complete card numbers or card security codes.
• Creative content: prompts, projection templates, reference images, start and end frames, uploaded files, generated images and videos, project settings, and related metadata.
• Usage and device information: requested URLs, browser and device type, approximate location derived from network information, timestamps, referral source, feature interactions, consent choices, error information, security signals, and service logs.
• Support and legal requests: the information you provide when requesting help, accessibility assistance, a refund, account deletion, a privacy right, or copyright review.

3. Sources

We receive information directly from you; automatically from your browser, device, and use of Lenscap; from authentication, payment, hosting, generation, moderation, analytics, and advertising service providers; and from referral links or fraud-prevention partners. If you sign in with Google, Clerk receives the profile information you authorize. Lenscap does not request access to your mailbox or unrelated Google content.

4. How we use information

We use information to:

• create, authenticate, secure, and administer accounts;
• provide image, video, and projection-mapping workflows and preserve projects and output history;
• process subscriptions, credits, taxes, refunds, disputes, creator referrals, and account entitlements;
• moderate content, prevent fraud and abuse, enforce policies, and protect users, Lenscap, providers, and the public;
• troubleshoot failures, provide support, and evaluate whether models and product features are operating as intended;
• measure and improve the product and advertising when you permit the relevant optional analytics category;
• send creative tips, product updates, and offers when you separately opt in to promotional email;
• communicate service, security, billing, policy, and legal notices; and
• comply with law and establish, exercise, or defend claims.

5. Legal bases where applicable

Where European, UK, or similar law requires a legal basis, we process information as necessary to perform our contract with you; for our legitimate interests in operating, securing, supporting, and improving Lenscap; to comply with legal obligations; and with consent for optional analytics, advertising measurement, or another use where consent is required, including optional promotional email. You may withdraw consent for future processing without affecting processing already completed.

6. Creative content and model providers

We send prompts and the reference media required for a generation to fal and the model provider selected in Lenscap. Our moderation provider may receive prompt text, downsized generated images, and a limited set of sampled video frames for safety review. Providers may also receive technical identifiers needed to process and diagnose a request. We do not send your payment-card number to generation providers.

Lenscap does not use private customer content to train a Lenscap foundation model or make it publicly available. We process private content to provide and secure Lenscap, moderate use, respond to support, investigate failures, and evaluate product and provider operation. Providers process content under their applicable contracts and privacy terms; provider practices can differ by model. See our Subprocessors page for current core providers and purposes.

7. Human access and public sharing

Access to private prompts, uploads, and outputs is limited to authorized personnel and providers with an operational need, such as support, moderation, security, failure investigation, and quality verification. Operational access does not permit public display. Lenscap has no public customer-output feed at launch. A future sharing or gallery feature will require a separate, affirmative choice for each item and will explain the display license, attribution options, audience, and how to stop future display.

8. Facial images and sensitive information

Reference images may contain faces or other likeness information. Lenscap uses those images to fulfill your creative request and does not use them to identify a person, authenticate identity, or create a biometric identification database. Do not upload identity documents, financial account credentials, medical records, precise location history, or other highly sensitive information unless expressly requested by Lenscap and genuinely necessary. You are responsible for having the rights and consent required for another person’s likeness.

9. How we disclose information

We disclose information as reasonably necessary to:

• hosting, storage, authentication, payments, tax, generation, moderation, communications, analytics, advertising, fraud, and professional-service providers acting for Lenscap;
• authorities, courts, rights holders, or counterparties when required by law or reasonably necessary to protect rights, safety, and security;
• a buyer, investor, lender, or successor in a financing, reorganization, merger, acquisition, or sale, subject to appropriate confidentiality and notice where required; and
• another party at your direction or with your consent.

We do not sell personal information for money. Optional Meta advertising measurement may be considered “sharing,” “targeted advertising,” or a similar regulated activity in some U.S. states. It remains off unless you affirmatively enable it, and a supported Global Privacy Control signal keeps it off.

10. Analytics, advertising, and cookies

Essential storage supports security, sign-in, privacy preferences, and requested functionality. If you choose product analytics, Firebase Analytics measures page visits and named product interactions. Google signals, advertising personalization, and automatic page-view collection are disabled in our integration. If you separately choose ad measurement, the Meta Pixel can measure visits and conversion events for campaign attribution and audiences. We do not intentionally send prompts, media, payment details, email addresses, or Lenscap account IDs as analytics event properties.

Firebase Analytics and Meta Pixel do not load until the corresponding optional category is enabled. You can change your choice through “Privacy choices” in the footer. See the Cookie & Privacy Choices Policy.

11. Referral information

When you follow a creator referral link, Lenscap may store an HTTP-only referral cookie and an anonymous visitor identifier for up to 30 days. We record the creator code, visit time, and landing path. If you create an account during that period, we associate the referral with qualifying purchases, refunds, and commission records. Creators do not receive your account, payment, or project information.

12. Retention

• Account profiles, projects, and media remain until you delete them or close the account, subject to operational and legal exceptions.
• Account-deletion requests are ordinarily completed within 30 days after identity, billing, fraud, security, and legal holds are resolved.
• Deleted information may remain in protected backups for up to 30 additional days before routine deletion or overwrite.
• Security and operational logs are ordinarily retained for 90 days, but an incident or legal requirement can justify longer retention.
• Referral cookies ordinarily expire after 30 days; consent choices remain on the browser until changed or cleared.
• Billing, tax, dispute, anti-fraud, and legal records are retained as required by law or reasonably necessary to establish or defend claims.

We may aggregate or de-identify information so it can no longer reasonably identify you and retain that information for product, security, financial, and statistical purposes.

13. Security

We use administrative, technical, and organizational safeguards designed to protect information, including managed identity, encryption in transit, private cloud storage, scoped service access, logging, and access controls. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. Protect your account credentials and contact us if you suspect unauthorized activity.

14. Your rights and choices

Depending on your location and whether a law applies to Lenscap, you may have rights to access, know, correct, delete, or obtain a portable copy of personal information; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; withdraw consent; appeal a denied request; and receive equal service without unlawful discrimination for exercising a right. Lenscap does not use personal information to make decisions producing legal or similarly significant effects about employment, housing, credit, insurance, education, or essential services.

You can change your promotional-email preference from your Lenscap account. Unsubscribing from promotions does not stop essential account, security, billing, policy, or legal messages.

Submit a request through the contact form or email support@auditylabs.com. Describe the right and your jurisdiction. We may verify the request through your account or email and may require an authorized agent to show authority. We ordinarily respond within 45 days when U.S. state law requires that period, subject to permitted extensions. To appeal a denial, reply with “Privacy appeal.” You may also complain to the privacy or data-protection authority where you live.

15. International processing

Lenscap is operated by a United States company and primarily uses U.S. cloud infrastructure. The founder and service providers may access or process information from Japan, the United States, and other countries where they operate. Privacy protections and government-access rules can differ from those in your country. Where required, we use contractual or other lawful safeguards for international transfers.

16. Children

Lenscap is not intended for anyone under 18, and we do not knowingly permit minors to create accounts. If you believe a minor has provided personal information, contact us so we can investigate and delete it where appropriate.

17. Changes to this notice

We will update the effective date when this notice changes. If a change materially expands how we use existing personal information, we will provide additional notice or request consent when required.

18. Contact

Audity Labs LLC
support@auditylabs.com
+17207066408