Privacy Policy

Last updated: November 28, 2026

This Privacy Policy explains how Flaregun Inc. ("Flaregun," "we," "us," or "our") collects, uses, and shares information when you use the Flaregun AiR website, applications, and services (the "Service"). By using the Service, you agree to this Policy. Capitalized terms not defined here have the meaning given in our Terms of Service.

1. Information We Collect

• Account information. First and last name, email address, and a hashed password when you create an account.
• Payment information. When you purchase a paid plan, our payment processor (Stripe) collects your payment details directly. We do not store full card numbers; we receive limited billing metadata (such as the last four digits, card brand, billing country, and Stripe customer/subscription IDs).
• Content you create. Channel names, descriptions, prompts, uploaded media, AI-generated outputs, and the GPS coordinates you choose to anchor content to.
• Device & usage data. IP address, browser type, operating system, referring URLs, pages viewed, and timestamps. We use this for security, analytics, and to operate the Service.
• Location data. When you place a Channel, you provide the GPS coordinates for that Channel. We may also process approximate location derived from your IP address.
• Cookies & local storage. We use cookies and browser local storage to keep you logged in, remember preferences, and measure usage. See "Cookies" below.

2. How We Use Information

• Provide, maintain, and improve the Service.
• Authenticate you and secure your account.
• Process payments, subscriptions, refunds, and tax obligations.
• Send transactional emails (e.g., verification, password reset, billing receipts).
• Display your Channels to other users who view the same location.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms.

3. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers. Stripe (payments), hosting and CDN providers, transactional email providers, AI inference providers, and analytics providers, each bound by contractual obligations to protect your data.
• Public Channels. Content you publish to a Channel is visible to anyone who views that location through the Service. Do not include private information in public Channels.
• Legal & safety. When required by law, subpoena, or to protect the rights, property, or safety of Flaregun, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Cookies & Similar Technologies

We use strictly necessary cookies and local storage to keep you signed in and to maintain session state. We may also use analytics cookies to understand aggregate usage. You can control cookies through your browser settings; disabling cookies may break parts of the Service.

5. Data Retention

We retain account and Channel data for as long as your account is active. Free-tier Channel content is automatically removed after 48 hours. When you delete your account, we delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, accounting, or fraud-prevention purposes.

6. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (HTTPS) and at rest where appropriate, and bcrypt password hashing. No system is perfectly secure; you use the Service at your own risk.

7. Your Rights

Depending on where you live, you may have rights to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email support@flaregun.ai. California residents have rights under the CCPA/CPRA, including the right to know, delete, and opt out of "sale" or "sharing" of personal information. We do not sell personal information. EEA/UK residents have rights under GDPR/UK GDPR. Our lawful bases for processing include contract performance, legitimate interests, consent, and legal obligation.

8. International Transfers

We operate in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. and other jurisdictions with different data-protection laws. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Children

The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@flaregun.ai and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email or through the Service.

11. Contact

Privacy questions or requests? Email us at support@flaregun.ai.