# Driftflight privacy policy

Effective 1 June 2026. Driftflight Studio, Inc. is the data controller.

## What we process

Account and billing details for plan customers; prompts and generated
outputs for all customers. Prompts and outputs pass an automated moderation
layer at generation time. Refused content is not stored.

## Retention

Generated images are retained at their hosted URLs for 90 days, then
deleted. Prompts are retained for 30 days for abuse prevention, then
deleted. Billing records are kept as required by law.

## Sharing

No sale of personal data. Processors: cloud hosting, payment processing, and moderation tooling, each under
contract.

Contact: privacy@drift-flight.org - terms: https://drift-flight.org/terms