Privacy Policy

This Privacy Policy describes how FromOne, Inc. ("FromOne", "we", "us", or "our") collects, uses, and shares information about you when you use our platform at fromone.ai and related services (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: Email address, name, and password when you create an account.
• Payment information: Billing details processed and stored by Stripe, Inc. FromOne does not store your full card details.
• Product photographs: Images you upload to generate marketing assets.
• Product context: Optional text descriptions you provide alongside your photographs.
• Communications: Emails or messages you send to hello@fromone.ai.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, run counts, and timestamps.
• Device and browser data: IP address, browser type, operating system, and referring URL.
• Authentication tokens: Session tokens used to keep you signed in.

1.3 Information from Third Parties

If you sign in with Google, we receive your name, email address, and profile picture from Google as permitted by your Google account settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Process your product photographs and generate marketing assets.
• Manage your account and subscription.
• Process payments and prevent fraud.
• Send transactional emails (e.g. delivery confirmations, billing receipts).
• Respond to your support enquiries.
• Monitor usage patterns to improve quality and performance.
• Comply with legal obligations.

3. How We Share Your Information

We share your information only as described below:

3.1 Service Providers

We share data with trusted third-party vendors who help us operate the Service:

• OpenAI — image generation and product analysis.
• Anthropic — marketing copy generation.
• Kling / Kuaishou — cinematic video generation.
• Cloudflare — media storage and CDN delivery (R2).
• Supabase — database and authentication.
• Stripe — payment processing.
• Vercel — application hosting.
• Resend — transactional email.

Each provider is bound by their own privacy policies and data processing agreements. We select providers who maintain appropriate data security standards.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of FromOne, our users, or the public.

3.3 Business Transfers

If FromOne is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify you via email or a notice on our website before your information is transferred and becomes subject to a different privacy policy.

3.4 No Sale of Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Generated assets and uploaded photographs are stored in Cloudflare R2 and retained for a minimum of 90 days after generation. You may request earlier deletion by contacting us at hello@fromone.ai.

Billing records are retained for 7 years as required by applicable accounting and tax regulations.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain types of processing.
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at hello@fromone.ai. We will respond within 30 days.

7. Cookies & Tracking

We use session cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising cookies or cross-site tracking technologies. You can disable cookies in your browser settings, but doing so may affect the functionality of the Service.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at hello@fromone.ai.

9. International Data Transfers

FromOne is based in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

FromOne, Inc.
Email: hello@fromone.ai