Privacy Policy

1. Overview & Commitment

Cosmic-Gen AI (“Cosmic-Gen”, “we”, “our”, or “us”) provides multi-modal artificial intelligence generation software, including desktop applications for macOS and Windows, and cloud GPU orchestration services accessed via https://cosmic-gen.com and associated APIs.

We are committed to transparent, privacy-first principles. We design our software so you retain absolute ownership of the prompts, media, and outputs you create. This Privacy Policy details how we handle information across both our Local Desktop Engine and our Cloud GPU Platform.

3. Information We Collect in Cloud Mode

If you choose to use our Cloud GPU Mode (pay-as-you-go credit service) or web portal, we collect the minimal data required to render and deliver your creations:

• Account Information: Your email address, username, password hash (salted using bcrypt), and account timestamps.
• Cloud Generation Requests: Prompts, model selections, aspect ratios, seeds, and uploaded reference images/audio required to execute the requested generation on cloud GPUs.
• Transaction & Credit Ledger: Records of credit purchases, lifetime license redemptions, and hourly GPU run consumption. We do not store raw credit card numbers; all payments are processed securely by Gumroad or Stripe.
• Technical Logs: IP address, device user-agent, error logs, and request latency to ensure platform stability, mitigate abuse, and manage GPU instance availability.

4. Voice Cloning & Audio Data Policy

When you utilize voice cloning features (e.g. Chatterbox-TTS):

• Your reference voice sample is used strictly to extract acoustic features for synthesis of the requested generation.
• We never use your uploaded voice clips or synthesized speech to train public foundational AI models.
• You must hold all necessary rights and consent from the speaker prior to uploading any voice sample for cloning.

5. Storage, Retention & Deletion

Cloud generations are stored in encrypted private Cloudflare R2 object storage.

• User Control: You may delete any generation from your personal gallery at any time through the application interface or by contacting support.
• Account Deletion: Upon receiving a deletion request, we permanently wipe your account records, associated cloud media files, and active session tokens within 30 days, retaining only legally required financial transaction ledgers.

6. Security & Sub-Processors

We implement industry-standard administrative and technical safeguards:

• TLS 1.3 encryption in transit for all web, API, and WebSocket channels.
• Strict Role-Based Access Control (RBAC) ensuring administrative staff cannot view private unlisted creations without authorization.
• Trusted Sub-Processors: Gumroad (payment processing and license fulfillment), Cloudflare (CDN, DDoS protection, R2 storage), and Vast.ai (bare-metal isolated GPU container runtime).

7. Your Privacy Rights (GDPR / CCPA)

Regardless of your location, you have the right to:

• Access and export the personal data associated with your account.
• Correct inaccurate or incomplete personal information.
• Request permanent deletion of your data and creations.
• Withdraw consent for marketing communications or optional telemetry.