--- title: "Privacy Policy - Azurade AI" description: "How Azurade AI collects, uses, and protects your personal data." canonical: https://azurade.com/privacy-policy/ --- [](https://azurade.com/) # Privacy Policy Last updated: September 1, 2026 This Privacy Policy (the “Policy”) explains how Dubir Group LTD (the “Company”, “we”, “us”) collects, uses, and protects personal data when you use Azurade AI (the “Service”) at https://azurade.com. We handle personal data in line with the EU General Data Protection Regulation (GDPR) and applicable data-protection law. By using the Service you agree to the collection and use of information as described here. ## 1\. Controller The data controller for your personal data is Dubir Group LTD, a company registered in the Republic of Cyprus (registration number HE 394277), registered office Charalampou Mouskou & Grigori Afxentiou, 20. ATHINODOROU BUSINESS CENTER, 3rd floor, Flat/Office 306, 8010, Paphos, Cyprus. Privacy enquiries: legal@azurade.com. ## 2\. What we collect You provide to us: - **Account data:** your email address and, if you sign in with Google, the basic profile information Google shares (name, email). You may set a display name. We store passwords only as a salted hash; when you sign in with Google we do not hold a password at all. - **User-generated data:** the text Prompts you enter and the images and videos you generate, which we store so you can access them in your gallery. - **Payment information:** we do not store your full card details. Payment is processed by our merchant of record (Creem.io); we receive only the payment status, card type, and the last four digits. - **Communications:** the history of messages you send to support. Collected automatically: - **Technical & usage data:** IP address, browser and device information, and log data needed to operate and secure the Service. - **Authentication token:** a token kept in your browser to keep you signed in. - **Analytics:** we use analytics tools (PostHog on EU infrastructure, and self-hosted Umami) to measure traffic and product usage. Neither one sets cookies or stores an identifier on your device; see section 9. ## 3\. How we use data & legal bases | Purpose | Legal basis (GDPR Art. 6) | | --- | --- | | Create and manage your account; provide and secure the Service | Performance of a contract | | Process your Prompts and generate images and videos | Performance of a contract | | Process subscriptions, credit purchases, and payments | Performance of a contract; legal obligation | | Improve and troubleshoot the Service; prevent fraud and abuse | Legitimate interests | | Measure website and product performance | Consent / legitimate interests | | Comply with tax, accounting, and legal obligations | Legal obligation | | Optional product updates or marketing | Consent (you can withdraw at any time) | We may use anonymised, aggregated data to improve our models. We do not use your personal data or your unique content to train models without your explicit consent. ## 4\. Sharing & sub-processors We do not sell or share your personal data, including as those terms are defined under applicable US state privacy laws such as the California Consumer Privacy Act (CCPA). We share it only with service providers (sub-processors) that help us run the Service, under contracts requiring appropriate safeguards: - **Payment processing (Creem.io):** merchant of record for subscriptions and credit purchases; handles the payment transaction, tax, and receipts. - **AI model inference providers:** third-party compute providers that run the models used to generate your content from your Prompts. - **Sign-in (Google):** to authenticate you when you choose to sign in with Google. - **Hosting & content delivery:** cloud infrastructure and a CDN that store and serve the application and your generated files. - **Analytics (PostHog, self-hosted Umami):** to understand and improve usage of the Service and our marketing pages. We may also disclose data where required by law, to enforce our Terms, or to protect rights, safety, and security. A current list of sub-processors is available on request at legal@azurade.com. Business customers who use the Service through our API can request a data-processing agreement (DPA) at the same address. ## 5\. International transfers Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. ## 6\. Retention We keep account and user-generated data for as long as your account is active. After you close your account we delete or anonymise personal data within a reasonable period (within 30 days of a deletion request), except where we must retain certain records (for example, billing and tax records) to comply with legal obligations. You can export your content before closing your account. ## 7\. Your rights Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact legal@azurade.com; we will respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority. ## 8\. Data protection We take reasonable technical and organisational measures to protect your data, including encryption in transit (TLS), password hashing, restricted access, and webhook signature verification. No method of transmission over the internet is 100% secure. See our [Security](https://azurade.com/security/) page for details. ## 9\. Cookies and local storage We set no cookies at all: no tracking or advertising cookies, and no cookie banner, because there is nothing to consent to. The Service keeps the following in your browser's local storage, all of it strictly necessary to run the app for you: - **Sign-in session:** your sign-in token and a copy of your account profile (name, email), so you stay signed in. Cleared when you sign out. - **Cached app data:** copies of data you have already loaded, such as your credit balance, your recent generations, and the plan list, so the app opens faster. It is the same data you see on screen, nothing more. Our analytics are cookieless. Umami is self-hosted and stores nothing in your browser. PostHog runs in memory-only mode: its session identifier lives in page memory and is gone when you close the tab. You can clear local storage through your browser settings at any time; doing so signs you out. ## 10\. Children The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe we have received data from a child, contact us and we will delete it. ## 11\. Changes to this Policy We may update this Policy from time to time. For material changes we will provide reasonable notice (for example, by email or in-app) and update the “Last updated” date above. ## 12\. Contact For any privacy question or request, contact us: Dubir Group LTD Charalampou Mouskou & Grigori Afxentiou, 20. ATHINODOROU BUSINESS CENTER, 3rd floor, Flat/Office 306, 8010, Paphos, Cyprus Email: legal@azurade.com Governing law: the Republic of Cyprus