Privacy policy

Nendo (the “Service”) is operated by Ronaldo Kurswell, a solo developer. Contact: nendodigital@proton.me. The Service is currently in closed beta.

• Your email address. Used to authenticate your account via magic-link sign-in (Auth.js) and to send transactional email (welcome, purchase receipt, low-credit notice). Stored in our Postgres database until you ask us to delete the account.
• Saved muses you create. The muse name, description, and any reference images you choose to save are stored in our Postgres database + Vercel Blob storage, scoped to your account. You can delete a saved muse at any time from the studio.
• Purchase history. If you buy a credit pack, we store the pack name, credits granted, amount paid (cents), Stripe checkout session id, and expiry date. We do not store your card number — Stripe holds payment details on their side and we receive only the session reference.
• Reference images and brief text for one-off generations. Held in your browser’s sessionStorage and posted to our image-generation provider for the duration of a single lookbook build. Not stored on our servers after the response unless you explicitly save them as a muse.
• Usage log. Each credit-spending event (which lookbook kind, when, how many credits) is logged to our database for billing transparency. Visible to you on /account.
• IP address. Used for rate-limiting only. Held in lambda memory, cleared when the day window resets.
• Anonymous analytics via Vercel Analytics — page views and country, no personal identifiers.

• No password — we use magic-link sign-in only.
• No card details — payments are processed by Stripe, who hold that data under their own privacy policy.
• No tracking cookies for advertising.
• No selling or sharing of personal data with third parties beyond the processors named below.
• No marketing emails unless you explicitly opt in.

Nendo runs on the following processors. Each receives only the data needed to do its job:

• Vercel — web hosting, serverless functions, file storage (Vercel Blob), and anonymous analytics.
• Neon — Postgres database (account, purchases, usage log, saved muses, saved lookbooks). Database is hosted in Sydney.
• Stripe — payment processing for credit-pack checkout. We send Stripe the pack id, price, and your email. Stripe holds card details under their own privacy policy. We never see or store your card number.
• Resend — transactional email delivery (magic link, welcome, receipt, low-credit notice). Resend processes your email address and message body to ship the email.
• Image-generation provider — receives your prompt + reference images for the duration of one generation request. Output images may persist briefly in the provider’s short-term CDN (typically up to 24 hours) but are not catalogued or shared by us.
• Text-generation provider — receives short prompts to enhance your brief, describe a reference, suggest costume notes, etc. Receives only the text snippets we send; no email or account id is forwarded.

We may rotate the underlying generation providers as model quality improves; if you need the current list for compliance reasons,email usand we’ll share it.

By uploading a photo of a person, you confirm that the person is:

• You, OR
• A fictional character, OR
• A real person who has given you explicit permission for their likeness to be used in AI generation.

Uploading someone’s likeness without their consent is a violation of these terms and may also be a violation of local law. We reserve the right to revoke beta access at any time for misuse.

You can:

• Sign out at any time — clears your session cookie.
• Delete a saved muse from the studio — removes the row from our database and the associated images from Blob storage.
• Delete a saved lookbook from your account — removes the row and its images from Blob storage. Lookbooks also auto-delete on the retention schedule above (paid 90 days, trial 7 days).
• Request full account deletion by emailing nendodigital@proton.me. We’ll wipe your user row, purchase history, usage log, saved muses, and saved lookbooks within 7 days. Stripe-side payment records are retained for tax/accounting purposes under Stripe’s policy.
• Request an export of the data we hold on you (same email). We’ll send a JSON dump within 7 days.

Nendo is in active development. This policy may change. The “last updated” date at the top reflects the most recent revision.