Overview
UndressGoon is operated by ZIAYING LLC, a New Mexico, United States limited liability company. This Privacy Policy explains how data is handled when you use the website, payments, support, and related services.
Information We Collect
- Account data from Google login, such as Google account identifier, email address, email verification status, name, and profile picture when provided by Google.
- Credit balance, referral records, consent acknowledgement, recent prompt metadata, generation records, order records, and support messages.
- Uploads, prompts, generation mode, generated results, and related job metadata needed to process your request.
- IP address, country, user agent, referrer, browser/device signals, anti-abuse fingerprint, analytics events, and advertising/tracking parameters when present.
- Payment metadata such as order ID, pack, amount, currency, status, provider invoice/payment IDs, and credited pack size. We do not intentionally collect full card numbers on the website.
Images, Prompts, and Results
Website generation results are returned to your authenticated browser as image data for the relevant job. The web API checks that the requesting account owns the job before returning results. The website does not publish your web generations in a public gallery.
Uploads and prompts are processed to complete generation requests and apply service safeguards. Generation results are not forwarded to a private messaging or moderation channel.
Generation result payloads are short-lived. Operational metadata, database records, logs, and payment records may persist where needed for support, security, disputes, accounting, or legal obligations. We do not promise that every processing copy is deleted immediately.
If you choose to report a completed result and expressly consent, we make a separate private support copy of the source image and the specific image or video result you reported. Authorized support staff can view that copy and your explanation to review the report. The media copy is scheduled for deletion approximately 7 days after submission, or sooner if you delete your account. A report does not make your result public or change the normal retention of other generations.
How We Use Information
- Authenticate users and maintain web sessions.
- Provide credits, referrals, generation requests, support, and payments.
- Process images through AI infrastructure and return results.
- Detect abuse of free credits, fraud, chargebacks, prohibited content, and security issues.
- Comply with law, payment processor requirements, and lawful requests.
- Improve reliability, troubleshoot failed jobs, and understand advertising campaign performance.
Third-Party Services
The service uses third parties to operate core features, including Google authentication, VPS hosting, Fly-hosted payment pages, RunPod or AI processing infrastructure, NOWPayments for crypto checkout, Stripe or other approved providers for card processing, and PostHog for product analytics/error visibility.
Those providers process information according to their own terms and privacy policies. Payment providers may collect additional payment, compliance, fraud, and billing data directly from you.
Retention
Account deletion removes access credentials, the personal profile, saved prompts and access to results. Media is not copied into the evidence archive and remains subject to the short-lived storage and cleanup rules above. We retain a restricted, pseudonymous dispute-evidence archive for 2 years after deletion: order references, amounts, credit allocations and recorded adjustments, the balance at deletion, generation identifiers/statuses/timestamps, and recorded browser delivery events. Where recorded, report decision totals and support-reply dates may also remain. This archive excludes readable account emails, names, IP addresses, prompts, message bodies and media. Payment references can still be linked to payment-provider records; this archive is not anonymous.
Authorized administrators can extend retention to a specified date when necessary for an open dispute. Expired evidence is purged by a daily scheduled process unless a dated extension applies. Minimal financial accounting records are retained separately where necessary for accounting and legal obligations. Existing encrypted backup copies age out under the backup retention schedule; restoring a backup must reapply account deletions and retention deadlines before service resumes.
Account, credit, order, referral, consent, abuse-prevention, and support records may be retained as long as needed to provide the service, resolve disputes, prevent fraud or abuse, satisfy accounting/payment records, comply with legal obligations, and enforce policies.
For result reports, the temporarily retained source and result media is scheduled for deletion approximately 7 days after submission. The report's reason, explanation, review status, and associated account and generation identifiers may remain as support records under the rule above.
You can permanently delete your account immediately from Account settings in the signed-in account menu. We may retain limited records where required for fraud prevention, chargeback response, legal compliance, safety enforcement, or to prevent repeat promotional-credit claims.
After deletion, the service retains one-way cryptographic anti-abuse markers derived from prior signup-credit claim signals. These markers do not contain the account email, IP address, provider identifier, or user-agent in readable form and are used only to prevent another free signup credit from being issued after deletion.
We also retain a one-way cryptographic email-suppression marker so a deleted account cannot receive automated marketing, reminders, receipts, or lifecycle messages. The deleted email address is not retained in readable form by this suppression record.
Security
We use practical security controls such as authenticated sessions, server-side consent enforcement, upload type checks, origin restrictions for web API calls, private operational review, and access checks on web generation jobs. No online service can guarantee perfect security.
Your Choices and Rights
You may delete your account directly from Account settings or contact us to request access, correction, deletion, or support. Depending on your location, you may have additional privacy rights. Contact support@undressgoon.app with enough information to identify your account.
International Users
The operator is based in the United States, and service providers may process data in the United States and other countries. By using the service, you understand that your information may be transferred and processed outside your location.
Contact
Privacy questions: support@undressgoon.app