This Privacy Policy (the “Policy”) explains how Dubir Group LTD (the “Company”, “we”, “us”) collects, uses, and protects personal data when you use Azurade AI (the “Service”) at https://azurade.com. We handle personal data in line with the EU General Data Protection Regulation (GDPR) and applicable data-protection law. By using the Service you agree to the collection and use of information as described here.

1. Controller

The data controller for your personal data is Dubir Group LTD, a company registered in the Republic of Cyprus (registration number HE 394277), registered office Charalampou Mouskou & Grigori Afxentiou, 20. ATHINODOROU BUSINESS CENTER, 3rd floor, Flat/Office 306, 8010, Paphos, Cyprus. Privacy enquiries: [email protected].

2. What we collect

You provide to us:

Account data: your email address and, if you sign in with Google, the basic profile information Google shares (name, email). You may set a display name. We store passwords only as a salted hash; when you sign in with Google we do not hold a password at all.
User-generated data: the text Prompts you enter and the images and videos you generate, which we store so you can access them in your gallery.
Payment information: we do not store your full card details. Payment is processed by our merchant of record (Creem.io); we receive only the payment status, card type, and the last four digits.
Communications: the history of messages you send to support.

Collected automatically:

Technical & usage data: IP address, browser and device information, and log data needed to operate and secure the Service.
Authentication token: a token kept in your browser to keep you signed in.
Analytics: we use analytics tools (PostHog on EU infrastructure, and self-hosted Umami) to measure traffic and product usage. Neither one sets cookies or stores an identifier on your device; see section 9.

3. How we use data & legal bases

Purpose	Legal basis (GDPR Art. 6)
Create and manage your account; provide and secure the Service	Performance of a contract
Process your Prompts and generate images and videos	Performance of a contract
Process subscriptions, credit purchases, and payments	Performance of a contract; legal obligation
Improve and troubleshoot the Service; prevent fraud and abuse	Legitimate interests
Measure website and product performance	Consent / legitimate interests
Comply with tax, accounting, and legal obligations	Legal obligation
Optional product updates or marketing	Consent (you can withdraw at any time)

We may use anonymised, aggregated data to improve our models. We do not use your personal data or your unique content to train models without your explicit consent.

4. Sharing & sub-processors

We do not sell or share your personal data, including as those terms are defined under applicable US state privacy laws such as the California Consumer Privacy Act (CCPA). We share it only with service providers (sub-processors) that help us run the Service, under contracts requiring appropriate safeguards:

Payment processing (Creem.io): merchant of record for subscriptions and credit purchases; handles the payment transaction, tax, and receipts.
AI model inference providers: third-party compute providers that run the models used to generate your content from your Prompts.
Sign-in (Google): to authenticate you when you choose to sign in with Google.
Hosting & content delivery: cloud infrastructure and a CDN that store and serve the application and your generated files.
Analytics (PostHog, self-hosted Umami): to understand and improve usage of the Service and our marketing pages.

We may also disclose data where required by law, to enforce our Terms, or to protect rights, safety, and security. A current list of sub-processors is available on request at [email protected]. Business customers who use the Service through our API can request a data-processing agreement (DPA) at the same address.

5. International transfers

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep account and user-generated data for as long as your account is active. After you close your account we delete or anonymise personal data within a reasonable period (within 30 days of a deletion request), except where we must retain certain records (for example, billing and tax records) to comply with legal obligations. You can export your content before closing your account.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact [email protected]; we will respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

8. Data protection

We take reasonable technical and organisational measures to protect your data, including encryption in transit (TLS), password hashing, restricted access, and webhook signature verification. No method of transmission over the internet is 100% secure. See our Security page for details.

9. Cookies and local storage

We set no cookies at all: no tracking or advertising cookies, and no cookie banner, because there is nothing to consent to. The Service keeps the following in your browser's local storage, all of it strictly necessary to run the app for you:

Sign-in session: your sign-in token and a copy of your account profile (name, email), so you stay signed in. Cleared when you sign out.
Cached app data: copies of data you have already loaded, such as your credit balance, your recent generations, and the plan list, so the app opens faster. It is the same data you see on screen, nothing more.

Our analytics are cookieless. Umami is self-hosted and stores nothing in your browser. PostHog runs in memory-only mode: its session identifier lives in page memory and is gone when you close the tab. You can clear local storage through your browser settings at any time; doing so signs you out.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe we have received data from a child, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. For material changes we will provide reasonable notice (for example, by email or in-app) and update the “Last updated” date above.

12. Contact

For any privacy question or request, contact us:
Dubir Group LTD
Charalampou Mouskou & Grigori Afxentiou, 20. ATHINODOROU BUSINESS CENTER, 3rd floor, Flat/Office 306, 8010, Paphos, Cyprus
Email: [email protected]
Governing law: the Republic of Cyprus