Legal
Privacy Policy
Last updated: July 23, 2026
This policy explains what information MediaMint collects, how we use and share it, and the choices you have. The short version: we collect what we need to run the service, we don't sell your data, and your creative work is yours.
1. Information we collect
Account information
When you sign up we collect your email address, name, and avatar — either directly or from the sign-in provider you choose (such as Google or GitHub). Authentication is handled by Supabase on our behalf.
Content you create
We store the prompts you write, the files you upload, the media you generate, and the structure of your boards and workspaces. Media files are stored on Backblaze B2; board and workspace data lives in our database.
Billing information
Payments are processed by Stripe. We receive your plan, payment status, and billing history, but we never see or store your full card details — those go directly to Stripe.
Usage and technical data
Like most services we collect logs — IP address, browser type, pages viewed, actions taken, and credit consumption — to keep the service secure, debug problems, and prevent abuse.
2. How we use your information
- To provide the service: run generations, render your boards, sync collaboration in real time, and store your library.
- To meter and bill: track credit balances, process subscriptions and top-ups, and prevent billing abuse.
- To communicate: transactional email about your account, billing, and material changes to the service or these policies.
- To keep MediaMint safe: detect fraud, enforce our Acceptable Use Policy, and secure accounts.
- To improve the service: aggregate, de-identified usage analysis.
We do not use your prompts, uploads, or generated media to train AI models, and we do not sell your personal information.
3. How generation works (and where your data goes)
When you run a generation, your prompt and any input media are sent to the third-party model provider that hosts the model you chose, via our inference partner (fal.ai). When you use the built-in assistant, your chat messages are processed by Google’s Gemini API. These providers process your inputs to return a result; their handling of API data is governed by their own terms. We only send what is needed to fulfil the request you made.
4. Who we share information with
We share personal data only with the subprocessors that run the service:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, and realtime collaboration |
| Backblaze B2 | Storage of uploaded and generated media |
| fal.ai & model providers | Running the AI generations you request |
| Google (Gemini API) | Powering the built-in assistant |
| Stripe | Payment processing |
Beyond that, we disclose information only if required by law, to protect the rights and safety of MediaMint or others, or as part of a corporate transaction (in which case this policy continues to apply to your data).
5. Workspaces and sharing
Content you place in a shared workspace is visible to its members, along with your name and avatar. If you create a public share link for a board, anyone with that link can view the board’s content. Media is served through time-limited signed URLs, but a link you share is public until you revoke it — share deliberately.
6. Retention and deletion
We keep your data while your account is active. When you delete an asset or board, it is removed from your library and becomes inaccessible; residual copies leave backups on a rolling schedule. When you delete your account, we delete your personal data and stored media within 30 days, except records we must keep for legal, billing, or security reasons. Content you contributed to a shared workspace may remain with that workspace.
7. Security
Data is encrypted in transit, access to production systems is restricted, media URLs are signed and expire, and database access is protected by row-level security. No system is perfectly secure — if a breach affects your data, we will notify you as required by law.
8. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export, restrict processing of, or delete your personal data, and the right to complain to a supervisory authority. You can exercise most of these directly from your account settings; for anything else, email privacy@mediamint.app and we will respond within 30 days. We do not discriminate against you for exercising your rights.
9. International transfers
Our infrastructure providers operate globally, so your data may be processed outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses with our subprocessors.
10. Children
MediaMint is not directed at children under 13 (or the applicable age of digital consent), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
If we make material changes we will notify you by email or an in-app notice before they take effect. The “Last updated” date at the top always reflects the current version.
12. Contact
Privacy questions or requests: privacy@mediamint.app. See also our Cookie Policy and Terms of Service.