Overview
UndressGoon is operated by ZIAYING LLC, a New Mexico, United States limited liability company. This Privacy Policy explains how data is handled when you use the website, Telegram bot, payments, support, and related services.
Information We Collect
- Account data from Google login, such as Google account identifier, email address, email verification status, name, and profile picture when provided by Google.
- Telegram identifiers and linking information if you link your website account to the Telegram bot.
- Credit balance, referral records, consent acknowledgement, recent prompt metadata, generation records, order records, and support messages.
- Uploads, prompts, generation mode, generated results, and related job metadata needed to process your request.
- IP address, country, user agent, referrer, browser/device signals, anti-abuse fingerprint, analytics events, and advertising/tracking parameters when present.
- Payment metadata such as order ID, pack, amount, currency, status, provider invoice/payment IDs, and credited pack size. We do not intentionally collect full card numbers on the website.
Images, Prompts, and Results
Website generation results are returned to your authenticated browser as image data for the relevant job. The web API checks that the requesting account owns the job before returning results. The website does not publish your web generations in a public gallery.
The current backend also sends uploads, prompts, generated results, and account/session metadata to a private moderation or operations destination when generation mirroring is enabled. This is used for abuse prevention, support, fraud review, and service security.
The web job cache is designed to expire short-lived job result payloads, but we do not promise that every copy of an upload or result is deleted after a fixed number of hours. Operational copies, Telegram platform copies, database records, logs, and payment records may persist as needed.
How We Use Information
- Authenticate users and maintain web sessions.
- Provide credits, referrals, generation requests, account linking, support, and payments.
- Process images through AI infrastructure and return results.
- Detect abuse of free credits, fraud, chargebacks, prohibited content, and security issues.
- Comply with law, payment processor requirements, and lawful requests.
- Improve reliability, troubleshoot failed jobs, and understand advertising campaign performance.
Third-Party Services
The service uses third parties to operate core features, including Google authentication, Telegram, Railway/backend hosting, cPanel/static hosting, Fly-hosted payment pages, RunPod or AI processing infrastructure, NOWPayments for crypto checkout, Stripe or other approved providers for card processing, and PostHog for product analytics/error visibility.
Those providers process information according to their own terms and privacy policies. Payment providers may collect additional payment, compliance, fraud, and billing data directly from you.
Retention
Account, credit, order, referral, consent, abuse-prevention, and support records may be retained as long as needed to provide the service, resolve disputes, prevent fraud or abuse, satisfy accounting/payment records, comply with legal obligations, and enforce policies.
You can permanently delete your account immediately from Account settings in the signed-in account menu. We may retain limited records where required for fraud prevention, chargeback response, legal compliance, safety enforcement, or to prevent repeat promotional-credit claims.
After deletion, the service retains one-way cryptographic anti-abuse markers derived from prior signup-credit claim signals. These markers do not contain the account email, IP address, provider identifier, or user-agent in readable form and are used only to prevent another free signup credit from being issued after deletion.
We also retain a one-way cryptographic email-suppression marker so a deleted account cannot receive automated marketing, reminders, receipts, or lifecycle messages. The deleted email address is not retained in readable form by this suppression record.
Security
We use practical security controls such as authenticated sessions, server-side consent enforcement, upload type checks, origin restrictions for web API calls, private operational review, and access checks on web generation jobs. No online service can guarantee perfect security.
Your Choices and Rights
You may delete your account directly from Account settings or contact us to request access, correction, deletion, or support. Depending on your location, you may have additional privacy rights. Contact support@undressgoon.app with enough information to identify your account.
International Users
The operator is based in the United States, and service providers may process data in the United States and other countries. By using the service, you understand that your information may be transferred and processed outside your location.
Contact
Privacy questions: support@undressgoon.app