Privacy Policy

Last updated: 4/18/2026

Data Controller

Responsible: Alexandra Isabel Lopes Amândio Hockett

Tax ID: 247445193

Address: 2735 Agualva-Cacém

Contact: privacy@codeaistudio.com

Purpose: AI content generation services

2. Legal Basis for Processing

Performance of contract: Processing necessary to provide the service (account management, generation requests, deliveries).

Consent: When required (non-essential cookies, marketing communications, certain processing of uploaded content).

Legitimate interests: Platform security, abuse prevention, service improvement and analytics (we balance these interests against user rights).

Legal obligation: Maintaining accounting and tax records (billing, retention as required by Portuguese law).

3. Personal Data Processed

Account and transactional data (mandatory):

Email, name and profile information (authentication via Clerk)

Billing and payment information (processed via Stripe; card data handled by Stripe)

Account identifiers, subscription and purchase history

Support communications and correspondence

Technical and usage data:

IP address, device and browser information

Usage logs (API requests, timestamps, errors) for diagnostics and abuse prevention

Cookies and tracking identifiers (see Cookie Policy)

Submitted / generated content:

Prompt texts and parameters provided by users

Uploaded images and audio files (temporary processing and optional storage)

Generated outputs and associated metadata (content_id, model used)

⚠️ Important: User-submitted content (prompts, images, audio) and certain metadata are sent to third-party AI providers (e.g., OpenAI, RunwayML, Google, Stability AI, ElevenLabs) to perform the requested generation tasks. These providers may further process the data according to their terms.

4. How We Share and Disclose Data

We share personal data with sub-processors to provide the Service (authentication, payments, hosting, AI processing). We only share the minimum data necessary for each purpose.

AI Providers: Prompts and uploaded media necessary for generation.

Payment Processing: Billing information and transaction data is shared with Stripe (our payment processor) to process payments. Card details are handled directly by Stripe and never stored on our servers.

Hosting and logs: Vercel may process logs and telemetry for hosting and performance.

Legal requests: We may disclose data to comply with legal obligations, enforce our Terms, or protect rights and safety.

8. Data Retention Periods

User account data: Account duration + 5 years for tax and accounting obligations.

Generated content: 90 days standard retention; up to 12 months for abuse investigation or quality review when necessary.

Temporary uploads: Deleted after processing or within 24 hours, unless saved by the user.

Technical, audit and consent logs: 24 months (or longer when necessary to defend legal claims).

Billing records: 7 years (legal requirement in Portugal).

💚 Privacy by Design: Automatic deletion whenever possible.

10. Data Subject Rights (GDPR)

Available Rights:

  • Access to your data
  • Rectification of incorrect data
  • Erasure ('right to be forgotten')
  • Data portability
  • Object to processing
  • Restrict processing

How to Exercise:

Email: privacy@codeaistudio.com

Response: Within 30 days

Cost: Free

Verification: ID may be required

11. Supervisory Authority

You have the right to lodge a complaint with the supervisory authority:

CNPD - National Commission for Data Protection

Website: www.cnpd.pt

Email: geral@cnpd.pt

Phone: (+351) 213 928 400

Cookies

We only use essential cookies for service functionality.

For more information, see our Cookie Policy.

12. Privacy Contact

For privacy questions:

Email: privacy@codeaistudio.com

Subject: "Privacy Question"

Response: Within 48 hours

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in processing activities, legal requirements, or new features. Material changes will be communicated by email or via platform notification and the policy version/date will be updated.

Version: 2.0 | Language: English (Portuguese version prevails in case of conflict)

This policy complies with GDPR (EU Regulation 2016/679) and Law 58/2019.

Code AI Studio | AI Content Creation Platform - Images, Videos & Avatars