Privacy Policy
What we collect, why, who else sees it, and how long we keep it. Last updated 7 October 2026.
Who we are
https://studio.codespeedy.com is operated by CodeSpeedy, India. For any privacy question, write to [email protected].
What we collect
- Account details. Your name and email address. If you set a password we store only a hash of it, never the password itself; if you signed in with Google there is no password on your account at all.
- Google sign-in, if you use it. Your name, email address, profile picture and your Google account ID. That is everything Google shares with us, and it is all we ask for. We never see your Google password.
- What you create. The prompts you write, the photographs you upload, and the videos and images generated for you.
- Billing records. The amount, currency, date and the payment reference returned by the gateway. We never receive or store your card number.
- Credit history. Every credit added, spent, refunded or expired, so your balance can always be explained.
- Approximate location. When you create your account we look up the country, region and city your IP address resolves to, and keep that. It is recorded once, at sign-up, and never looked up again — so it is where you signed up from, not where you are. We use it to understand where our customers are. The IP address itself is not stored: it is used for that one lookup and discarded.
- Technical data. Your IP address at the moment of payment, used to decide which payment method to offer, and standard server logs.
Signing in with Google
Signing in with Google is optional — an email address and password works just as well.
If you use it, Google tells us four things: your name,
your email address, your
profile picture and your
Google account ID. We request nothing beyond the
standard openid profile email
permissions, which means we have no access to your Gmail, your Drive, your contacts or
anything else in your Google account.
- What we do with it. Your email identifies your account and is how we contact you about your renders and payments. Your name and picture appear in the app so you can see you are signed in as yourself. The account ID lets us recognise you on your next visit.
- What we never do with it. We do not sell it, we do not advertise against it, we do not use it to train any model, and we do not pass it to anyone beyond the processors listed below.
- If your email already has an account here, signing in with Google connects the two rather than creating a second one — and only because Google has confirmed you own that address.
- Taking it back. You can disconnect us at any time from your Google account permissions. Set a password first from your profile page, or you will not be able to sign in afterwards. Deleting your account here removes the Google details with everything else.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Why we hold it
To run your account and show your library, to generate what you ask for, to take payment and keep accurate financial records, to prevent abuse of the service, and to meet tax and accounting obligations. We do not sell your data, and we do not use what you create to train our own models.
Who else receives it
These are the only third parties that receive any of your data, and only what each needs:
| Who | What they receive |
|---|---|
| Higgsfield | Generates the videos and images. Receives your prompts and any reference photographs you upload. |
| Only if you choose to sign in with Google. Google confirms who you are and shares your name, email address, profile picture and account ID. It receives nothing from us about what you make. | |
| Stripe | Takes card payments outside India. Receives your name, email and payment details — card numbers never reach our servers. |
| Razorpay | Takes payments in India. Receives your name, email and payment details — card numbers never reach our servers. |
| ipgeolocation.io | Resolves an IP address to a country — at checkout, so the right payment method is offered, and once when an account is created, to record the approximate place it was created from. Receives the IP address only. |
Prompts and reference photographs are sent to Higgsfield because that is how a video or image is produced — there is no way to generate something without sending it.
How long we keep it
- What you create stays until you delete it, or until your account is closed.
- Billing and credit records are kept for as long as tax and accounting law requires, even after an account closes. These cannot be deleted on request.
- Contact messages are kept while the enquiry is open and for a reasonable period afterwards.
Your rights
You may ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and its content. Write to [email protected] and we will respond within 30 days. Deleting your account removes your library; it does not remove financial records we are required to keep.
Security
The site is served over HTTPS. Passwords are hashed, and payment credentials are encrypted at rest. Card details are entered on the payment provider's own page or window and never reach our servers. No system is perfectly secure, and we will tell affected customers promptly if a breach ever puts their data at risk.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you meaningfully, tell you by email.