Privacy Policy
This Privacy Policy explains what information Retina Imageworks Inc, a California corporation (“Retina”, “we”), collects when your team uses Nuke AI Hub, how we use it, and the choices you have. Nuke AI Hub is a business product; the account holder is your company or studio, and this policy covers the personal data of the individual users on a team.
Account data: username, email address, team name, role, and password (stored as a salted hash, never in plain text).
Billing data: subscription tier, seats, token balances, payment history, and invoice references. Card numbers are handled exclusively by our payment processor and never touch our servers.
Request-level usage and operations data: team and user identifiers, request/trace/job/reservation references, token consumption, model and feature usage, provider route, timing, status, and structured or redacted error categories. These records support billing, quota enforcement, incident recovery, capacity planning, audit, and abuse prevention.
Connection and device data: source IP address, opaque or hashed machine/workstation identifiers, application and Nuke versions, seat-lease state, and last-seen timestamps needed to secure accounts and enforce seats.
Generated media: Nuke AI Hub does not provide permanent cloud media storage. Generated result files are kept for up to 48 hours after the job completes, so the desktop application can retrieve them, and are then deleted. Other temporary working copies that no job protects are eligible for cleanup after 15 minutes. Reference uploads are eligible for cleanup after 24 hours, with active jobs protected until they finish. Gallery records contain metadata rather than media bytes and expire after 24 hours by default. Third-party model providers may process or retain submitted content under their own provider terms.
Generation records: the parameters of each image or video generation, including its prompt text, are stored with the job so it can be run, retried, billed, and supported. Thirty days after a job is created, the prompt text in a finished job is replaced by a short one-way hash and its length; the job's billing facts are kept. Some assistant outputs (such as conversation summaries and asset tags) are kept encrypted for 24 hours by default so a response lost in transit can be delivered again without a second charge.
Support communications: messages you send to support, so we can respond.
Default telemetry from the desktop application and the plugin for Nuke does not include your prompts, chat contents, local file paths, project files, or reference media. Telemetry is summary-only: identifiers, counts, durations, status, and structured error codes/categories; free-form error prose is omitted. Prompts and reference media you submit for a generation are never collected as telemetry; they are sent to fulfil that request and are kept only as described in Sections 1 and 5.
To operate, secure, and bill the Service; to enforce seat and quota limits; to send transactional email (account verification, receipts, payment failures, usage statements); to provide support; and to improve reliability and capacity planning using aggregated usage data. We do not sell personal data and we do not use your content to train models.
We use the service providers listed below (also published at /legal/subprocessors). Each receives only the data its purpose needs: AI model providers receive the prompts, reference media, and other request content needed to fulfil each request, under their respective data-processing terms; the payment processor receives the billing details necessary to charge you; the email provider receives recipient addresses and message content; the hosting provider stores data on our behalf.
OpenAI — AI models for chat, assistant, and image features.
OpenRouter — Model routing: forwards requests to models from OpenAI, Google, Anthropic, and DeepSeek.
Google — Gemini AI models.
DeepSeek — AI models for chat (direct API).
fal.ai — Image and video generation models.
Kling (Kuaishou) — Video generation models.
ByteDance BytePlus ModelArk (“ARK”) — Seedance video generation models.
Stripe — Payment processing for subscriptions, seats, and token packs.
Mailgun — Delivery of transactional email and support email.
DigitalOcean — Cloud hosting, database backups, and object storage.
These providers, and our own infrastructure, may process data in the United States, China, and other countries.
We may disclose information when required by law or to protect the rights, safety, or property of Retina, our customers, or the public.
Account and billing records are kept for as long as your account exists and as required for tax, accounting, and legal obligations. Generated result files, working copies, reference uploads, and gallery metadata follow the temporary cleanup windows described in Section 1; files needed by an active job are protected until the job finishes.
Prompt text in generation records is replaced by a one-way hash 30 days after the job was created. IP addresses in request logs are removed after 90 days. Request logs and provider diagnostic records (which provider and model served a request, timing, token counts, and cost) are moved out of our live database into archive storage after 180 days. Email delivery records, and support email threads with no activity for 180 days, have their email addresses, names, subjects, message bodies, and attachments removed after 180 days.
Request-level usage, security, seat, billing, and audit records are otherwise retained for the account and business-record lifecycle and as required for security, accounting, dispute, and legal obligations; aggregated analytics may be derived from those records. After account termination you may request an export within 30 days, after which data may be deleted.
Data in transit is encrypted with TLS. Passwords are stored as salted hashes. Access to production systems is restricted and audited. No system is perfectly secure; we will notify affected customers of a personal-data breach as required by applicable law.
Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. Team owners can exercise these rights for their team by emailing support@nukeaihub.com; individual users should route requests through their team owner where the data belongs to the team account.
Our infrastructure and the third-party providers listed in Section 4 may process data in the United States, China, and other countries, which may be different from yours. Where required, we rely on appropriate safeguards for such transfers.
We will post changes to this policy here and, for material changes, notify account owners by email. Privacy questions: email support@nukeaihub.com.