# Driftflight privacy policy

Effective 1 June 2026. Driftflight Studio, Inc. is the data controller.

## What we process

Account and billing details for plan customers; prompts and generated
outputs for all customers. Prompts and outputs pass an automated moderation
layer at generation time. Refused content is not stored.

## Retention

Generated images are retained at their hosted URLs for 90 days, then
deleted. Prompts are retained for 30 days for abuse prevention, then
deleted. Billing records are kept as required by law.

## Agent purchases

Purchases made through the ZeroClick agent storefront are processed by
ZeroClick; we receive the order and a payment reference, not the payment
instrument. We do not receive or store agent conversation content - only the
prompt submitted to the API.

## Sharing

No sale of personal data. Processors: cloud hosting, payment processing
(ZeroClick for storefront purchases), and moderation tooling, each under
contract.

Contact: privacy@driftflight.com - terms: https://driftflight.com/terms