Privacy Policy

Last updated: December 2025

1. Information We Collect

We collect information you provide directly to us, as well as information collected automatically when you use our services.

Information You Provide

  • Account Information: Email address when you join our waitlist or create an account
  • Profile Information: Name and company information (optional)
  • Payment Information: Billing details when you add credits to your account (processed securely by our payment provider)
  • Workflow Data: Workflow JSON and related data you submit for processing
  • Communications: Information you provide when you contact us for support

Information Collected Automatically

When you visit our website or use our services, we automatically collect certain information:

  • Device Information: IP address, browser type, operating system, and device identifiers
  • Usage Information: Pages visited, time spent on pages, and navigation paths
  • Location Information: Approximate geographic location based on IP address
  • Referral Information: How you arrived at our website

2. How We Use Information

We use the information we collect to:

  • Provide Services: Process your workflow requests and deliver results
  • Maintain and Improve: Monitor service performance and develop new features
  • Communicate: Send you technical notices, updates, and respond to inquiries
  • Billing: Process payments and manage your account
  • Analytics: Analyze usage patterns to improve our service
  • Security: Detect, prevent, and respond to fraud, abuse, or security incidents
  • Legal Compliance: Comply with legal obligations and enforce our terms

3. Cookies and Tracking

We use the following services that may set cookies or collect usage data:

  • PostHog: Product analytics to understand how users interact with our site. PostHog helps us track page views, feature usage, and conversion events. You can opt out of PostHog tracking through your browser settings or by using a browser extension that blocks analytics.
  • Cloudflare Web Analytics: Privacy-focused analytics that does not use cookies and does not track users across sites. This provides us with aggregate statistics about page views and performance metrics while respecting your privacy.

You can control cookie settings through your browser preferences. Note that disabling cookies may affect some functionality of our services.

4. Data Sharing

We do not sell your personal information. We may share data in the following circumstances:

  • Service Providers: With trusted third parties who assist in operating our service, including payment processing (Stripe), hosting (Cloudflare), and analytics providers. These providers are bound by contractual obligations to protect your information.
  • Legal Requirements: When required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
  • With Your Consent: When you have given us explicit permission to share your information.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this policy:

  • Account Data: Retained for as long as your account is active or as needed to provide services
  • Workflow Data: Retained for 30 days after processing for troubleshooting and support purposes, then automatically deleted
  • Output Files: Generated images and files are retained for 24 hours to allow retrieval, then automatically deleted
  • Usage Logs: Retained for up to 90 days for security and operational purposes
  • Billing Records: Retained as required by tax and accounting regulations

You may request deletion of your data at any time by contacting us.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of your personal data we hold
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a portable format
  • Objection: Object to processing of your data for certain purposes
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@cmfy.cloud. We will respond to your request within 30 days.

7. Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption in transit (TLS/HTTPS) and at rest
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Incident response procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards to protect your information in accordance with this policy and applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: