Privacy Policy

1. Information we collect

To provide PoloX AI, we may collect: account information (such as name, email, and avatar obtained through Google Sign-In); usage information (such as generation history, credit changes, device data, and logs); and content you submit (such as prompts, reference images, and other uploads). We do not actively collect sensitive personal information that is unrelated to the service.

2. How we use information

We use this information to create and maintain accounts, complete authentication, process generation tasks, calculate credits and transactions, protect security and prevent abuse, improve the product, and communicate with you where required by law or with your consent (for example, service notices and customer support).

3. Sharing and disclosure

We do not sell your personal information. We share data only when needed: to send your submitted content to technical providers that perform generation; to use processors for payments, sign-in, infrastructure, analytics, or advertising measurement (see section 4); or to comply with laws, regulators, or legal proceedings. Processors may handle data only as needed to deliver the service.

4. Analytics and advertising partners

We use two third-party services that process data on our behalf. Both run in your browser and may set their own cookies (see section 7).

• Microsoft Clarity (Microsoft Corporation): session recording and usage analytics. Clarity records how pages are used, such as clicks, scrolling, mouse movement, and the pages you visit, so we can find problems and improve the product. If you are signed in, we link Clarity sessions to your account ID and email address. Clarity's cookies include _clck and _clsk. See the Microsoft Privacy Statement.
• Google Ads (Google LLC): advertising conversion measurement with Google's tag (gtag.js) and Google Consent Mode. The tag loads on our public pages and tells Google which page you are viewing. When you sign up, complete your first generation, or make a purchase, we report that event to Google Ads with an internal reference number and, for purchases, the amount and currency. This tells us which ads led to sign-ups and sales. We may also upload these events to Google Ads together with the Google Ads click ID from the ad you clicked (see polox_adclick in section 7), so Google can match them to that ad. We do not send your name or email address to Google Ads. Google's tag may set cookies such as _gcl_au and _gcl_aw, including when you arrive from a Google ad. See how Google uses information from sites that use its services and the Google Privacy Policy.

EEA, UK, and Switzerland. If your connection comes from the European Union, the European Economic Area (Iceland, Liechtenstein, Norway), the United Kingdom, or Switzerland, we show a cookie banner. Until you accept, Microsoft Clarity does not load, our own visitor analytics (polox_vid) are off, we set no sign-up attribution cookies (polox_source, polox_landing, polox_tracked), we store no Google Ads click ID (polox_adclick) or campaign parameters (polox_utm), and Google's tag runs with advertising and analytics storage denied. In that mode it sets no advertising cookies and sends only limited, cookieless signals. If you reject cookies, or later reject them under "Cookie settings" in the footer, we stop Clarity, ask it to clear its cookies, remove our visitor ID, and delete these attribution and ad click cookies. The essential cookies in section 7, including the anti-abuse device identifier polox_did, are not affected by your choice.

Outside these regions, these tools are on by default. You can block or delete their cookies in your browser settings. Clarity recording and conversion reporting are turned off on devices our staff use to administer the service.

5. How we handle data you upload and generate

Data you upload to or generate on PoloX AI is not sold to any third party, and we do not disclose it to third parties.

1. Some features run on third-party APIs. To provide those features, the data needed for the request is sent to the corresponding provider. We do not control how that provider uses the data. Their own privacy policy applies.
2. We log system errors so we can diagnose failures. We also use AI to evaluate how the service performs for you. After the results are de-identified, we may publish them on the site to show service quality. De-identified content does not include information that can identify you.

6. Storage, security, and retention

We use reasonable technical and organizational measures to protect data, but internet transmission cannot be guaranteed as fully secure. We retain information only as long as needed for the purposes in this policy, to meet legal obligations, or to resolve disputes. After that period we delete or anonymize it, unless the law requires otherwise.

7. Cookies and similar technologies

We use cookies and local storage for the purposes below. You can manage cookies in your browser, but blocking them may affect some features, such as staying signed in.

• Essential. The service needs these cookies to work, so the cookie banner does not affect them. nuxt-session keeps you signed in (30 days). polox_did is a random device identifier (1 year), set in every region, including before you answer the cookie banner. Together with a hashed form of your IP address, it helps us prevent abuse such as repeated free-credit sign-ups, and it is not used for analytics or advertising. polox_credits_claimed records that free sign-up credits were already claimed on this device (1 year). polox_consent stores your cookie banner choice (12 months). app_settings remembers interface preferences until you close your browser. polox_no_track turns off analytics on devices our staff use.
• Sign-up attribution. polox_source, polox_landing, and polox_tracked remember the external site that referred you and the first page you opened (1 year). If you create an account, we save this with your account. In the EEA, the UK, and Switzerland they are set only after you accept cookies.
• Analytics. polox_vid is a random visitor ID, kept in a cookie and local storage for 2 years. Once per browser session, we record it with the page you landed on, the referring site, campaign (UTM) parameters, your country, and your Microsoft Clarity IDs. After you sign in, we link it to your account. To label automated traffic, we check basic browser characteristics and whether a request comes from a cloud provider; we don't store these details. Microsoft Clarity sets its own cookies (see section 4).
• Advertising measurement. polox_adclick stores the Google Ads click ID (gclid, gbraid, or wbraid) from the ad that brought you here, and polox_utm stores the campaign (UTM) parameters of the link you arrived from (90 days each). If you sign up, we save them with your account; if you accept cookies after signing up, we add the click ID to your account at that point. In the EEA, the UK, and Switzerland they are set only after you accept cookies. Google's tag sets its own cookies (see section 4).

In the EEA, the UK, and Switzerland, analytics, sign-up attribution, and advertising cookies are used only after you accept them, and rejecting deletes them (see section 4). You can change your choice at any time under "Cookie settings" in the footer. We also use local storage and session storage on your device for interface state, such as theme, layout, and drafts.

8. Your rights

Where applicable law allows, you may request access to, correction of, export of, or deletion of your personal information, or ask us to restrict or object to certain processing. We will respond within a reasonable time after verifying your identity. Deleting your account or data may prevent you from using some or all of the service.

9. Policy updates

We may update this policy from time to time. Material changes will be posted on the website or communicated in another reasonable way. Continued use of PoloX AI after an update takes effect means you accept the revised policy.

10. Contact us

VISIONFORGE CO., LTD — Registered address: 30 N GOULD ST STE R Sheridan, WY 82801.

Waffo.com Limited is our payment service provider. Registered address: RM 1903, 19/F Lee Garden One, 33 Hysan Avenue, Causeway Bay, HK.

For questions, complaints, or requests about this policy or our handling of personal information, contact Vision Forge Co., Ltd (PoloX AI) customer support at [email protected]