Privacy Policy

1. Account and sign-in information

We store your account identifier, email address, nickname, account balance, sign-in sessions and account activity needed to provide saved projects, credits and account security. Email verification codes are delivered through Resend. The email and verification details are used to confirm account access.

The English and Chinese versions use the same account system. Existing account information is not replaced when you change language or connect Google.

2. Information from Google

When you choose Google sign-in, Google sends an identity credential containing your unique Google account identifier, email address, email-verification status and authentication details. It may also include basic profile fields such as your name or profile picture. Raven AI uses the account identifier and verified email for authentication and connection to your Raven AI account; it does not use the additional name or picture fields to build a profile.

We store the Google account identifier, associated email and account-connection record. The Google identity credential is verified on the server and is not retained in account storage. We do not request Google access tokens or refresh tokens, and we cannot read your Gmail, Google Drive or contacts.

Google sign-in information is used for account access, account connection and authentication security. It is not sold, used for personalized advertising or used to train AI models. To connect an existing account, you first sign in to that account and choose the Google account with the same email.

You can review or revoke Google access in your Google Account settings. Revoking Google access does not automatically delete your Raven AI account or saved projects. Contact us if you also want the connection record or account removed.

3. Images, prompts and saved projects

Features identified as browser-local process images on your device. Cloud AI generation and editing send the images, reference material and prompts needed for the selected operation to the configured image-processing service. The current integrations include Visionary for AI image generation and Koukoutu for background removal.

Saved projects and image versions are stored by the website so that you can reopen them from your account. Browser drafts may also be stored on your device. Only provide images and other information that you are authorized to use. Avoid including sensitive personal information that is unnecessary for your edit.

Image-processing providers have their own data-handling policies. Browser-local processing should not be confused with cloud AI generation; the processing method depends on the feature you choose.

4. Cookies, device information and analytics

Necessary cookies maintain your sign-in session, protect login requests and support invitation and abuse-prevention controls. Security records may include browser/device information, sign-in times and network identifiers. Google login requests use a short-lived, device-bound challenge that expires after ten minutes and can only be used once.

On the production website, Google Analytics and Baidu Analytics are used to understand page visits and service usage. Their scripts can process browser, network and interaction information and use cookies according to their own policies. These analytics are not loaded in the local development preview. Raven AI does not deliberately send Google sign-in credentials or verification codes to analytics services.

Your browser privacy settings can restrict third-party cookies or scripts. Blocking necessary cookies may prevent sign-in or account features from working.

5. Service providers and payments

Information needed for a feature is processed by the relevant service: Google for Google sign-in, Resend for verification emails, the configured image-processing providers for cloud image tasks, and the website's hosting and storage infrastructure for account and project records.

If you purchase credits, payment processing is handled by the payment service shown at checkout, currently Alipay. The website keeps order and payment-status records to credit your account and handle support requests. Do not send card details or passwords in support messages.

6. Retention and deletion requests

Account and project records are kept to operate your account and saved-work features. Login challenges expire promptly; security and transaction records may be retained to investigate abuse, resolve disputes and support service operation. Removing a saved project from the account interface removes it from your active project list; backup or security records may remain where needed for these purposes.

To request access, correction, deletion of your account or removal of a Google connection record, email wu95102@gmail.com from the address associated with your account. We may need to verify your identity before acting. Signing out or revoking Google access is not the same as deleting an account.

7. Security and updates

We use server-side identity verification, restricted sign-in cookies and abuse controls to protect account access. No online service can guarantee absolute security. Never share verification codes, account passwords or identity credentials.

This page may be updated when the website's data practices change. Material changes to the use of Google account information will be disclosed, and additional permission will be requested where required.