Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how ERC MARKETING FZ-LLC, a free zone limited liability company registered in the United Arab Emirates (“ERC”, “we”, “us”), collects, uses, and protects your information when you use Eviolite(the “Service”), available at eviolite.app.

1. Information we collect

• Account data: your name, email address, and a securely hashed version of your password.
• Payment data: purchases are processed by Stripe. We do not receive or store your full card details; we keep a record of the purchase (amount, plan, date, status).
• Content you provide: the text prompts you enter and any reference images you upload.
• Generated content: the images and videos produced for you.
• Technical data: IP address, request metadata, and usage logs, used for security, abuse prevention, and rate limiting.
• API keys: if you create keys for the public API, we store only a cryptographic hash of each key.

2. How we use your information

• To provide, operate, and maintain the Service.
• To generate the images and videos you request.
• To process payments and manage your credit balance.
• To prevent fraud, abuse, and security incidents.
• To communicate with you about your account and the Service.

3. AI generation and third-party processors

To generate content, your prompts and reference images are transmitted to our third-party AI generation provider, which processes them to produce the requested output. We also rely on the following processors to run the Service:

• Stripe — payment processing.
• Vercel — hosting and file storage (Vercel Blob).
• Turso — database.
• Resend — transactional email.
• Our AI generation provider — creating the images and videos.

Each processor handles data under its own terms and security measures.

4. Data retention

Generated images and videos, and their associated records, are automatically deleted approximately two (2) days after they are created. Uploaded reference images are deleted shortly after they are used (approximately one day). Account information is retained for as long as your account is active; when you delete your account, we delete your associated data, except where we must retain limited records to comply with legal, accounting, or fraud-prevention obligations.

5. Cookies

We use a strictly necessary session cookie to keep you signed in and a cookie to remember your language preference. We do not use advertising or third-party tracking cookies.

6. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. You can delete your account at any time, or contact us to exercise these rights.

7. Security

Passwords are hashed, data is transmitted over encrypted connections, and access is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

We are based in the United Arab Emirates and process data there and in the regions of our processors (including the United States and the European Union). By using the Service you understand your information may be processed outside your country.

9. Children

The Service is not directed to individuals under the age of 18, and we do not knowingly collect their data.

10. Changes

We may update this Policy from time to time. Material changes will be reflected by updating the date above.

11. Contact

ERC MARKETING FZ-LLC (United Arab Emirates) — Eviolite.
Questions about privacy: support@eviolite.app