Privacy Policy

Last updated: 30 September 2026.

Tyzli AI is operated by Company Name Ltd (company number 00000000, Street 1, City, Country), the controller of your personal data. Contact for any privacy question or request: hello@example.com.

What we collect and why

• Account: name, email, password (stored only as a hash), optional username and bio. Needed to provide the service (GDPR Art. 6(1)(b)).
• Your content: prompts, uploaded photos, generated images, videos and audio, chats, characters and posts. Needed to create and store your results (Art. 6(1)(b)). Uploaded photos are used only to make your result.
• Payments: orders, amounts and dates. Card data is handled by the payment provider and never reaches us. Kept to meet accounting and tax law (Art. 6(1)(c)).
• Usage and safety: credit history, basic product events, a keyed hash of your IP address for rate limits and abuse prevention, and prompts blocked by the content filter. Legitimate interest in running a safe service (Art. 6(1)(f)).
• Emails: account emails (confirmation, password reset, receipts) always; tips and offers only if you agreed, with one-click unsubscribe in every email (Art. 6(1)(a)).
• Messages you send through the contact form and your newsletter sign-up, if you leave one.

Who processes your data for us

Hosting and storage in the European Union. AI model providers receive the prompt and reference photos needed for your request (for example Google, OpenAI, Anthropic, ByteDance, Black Forest Labs, fal.ai or an aggregator); they process them to return the result and, under their API terms, do not use them to train models. Email delivery by Resend. Payment processing by the payment provider shown at checkout. Some providers are outside the EU; transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

Fraud prevention

To keep the free credits and the referral programme fair, we store a keyed hash of the IP address you signed up and last signed in from, a random device identifier and a normalised form of your email address. We never store the IP address itself. These signals are only compared with other accounts to decide whether a referral bonus is paid (legitimate interest, Art. 6(1)(f)). When you delete your account they are erased, except for a one-way hash of the email address, which only prevents the welcome bonus from being paid to the same inbox twice.

Reports, moderation and the free try

When you report content, we keep the report, your account id or the email you chose to leave, and our decision, so we can answer you, handle appeals and show regulators how notices were handled (legal obligation under the Digital Services Act). Decisions about your own content are kept with their reasons for the same purpose. The free image on the home page and the free background tool store nothing: the prompt or photo and the result live only for that request, apart from a count per network per day to limit abuse.

Staff access

Our team can open an account to answer a support request or review a report. Every such action, including opening a private file, is recorded in an internal audit log.

How long we keep data

Account and content: until you delete them or the account. Orders and credit records: as long as accounting law requires (usually 5 to 10 years), anonymised after account deletion. Blocked-prompt logs and security logs: up to 12 months. Email logs: up to 24 months.

Your rights

You can access, correct, export, restrict or delete your data and object to processing. Export and delete work instantly in Account, Settings, Your data. For anything else write to hello@example.com; we answer within 30 days. You can also complain to your data protection authority.

AI-generated content

Images and videos made on Tyzli carry a machine-readable AI-generated label in their metadata, as required by the EU AI Act. Images from free accounts that never paid also carry a small visible watermark.

Children

Tyzli is for people aged 16 and over. We do not knowingly collect data from children.