Privacy Policy

Last updated: November 1, 2026

01Who we are

This policy explains what personal data Subicon LLC (“we”, “us”) collects when you use Aventada, why we collect it, who we share it with and the choices you have. Subicon LLC, 8206 Louisiana Blvd NE, Ste A #8276, Albuquerque, NM 87113, USA, is responsible for your data.

For anything about your data, write to support@aventada.ai.

02What we collect

  • Account: your email address, and the display name and profile photo you add.
  • Your content: the prompts you write, the images you upload, and the videos and images you generate, with the folders you sort them into.
  • Voice prompts: when you dictate a prompt, the recording is sent for transcription and the text comes back to you. We don’t keep the recording.
  • Usage and billing: your generations (model, settings, status and cost), your credit history, and your plan and subscription status. Stripe processes your card: we never see or store your card number.
  • Sign-in and security: one-time sign-in codes (stored only in hashed form), your signed-in sessions, and IP addresses and basic request details in our server logs.
  • Connected AI apps: when you connect an app such as Claude or ChatGPT, its name, the access you approved, its access tokens (stored only in hashed form) and the generations it starts.
  • Waitlist: the email address you give us to hear when Aventada opens, the site language you were using and, if you came from the pricing page, the plan you were looking at. We also note how you found us: the share link of the friend who sent you, the campaign tags in the link (utm_source, utm_medium, utm_campaign) and the name of the site you came from, never the full address.
  • Visits: we count page views per day, by page, language, referring site and campaign tag. These are totals only: we don’t store your IP address or browser details, and set no cookie for it.
  • Support: the messages you send us.

03How we use it

  • to run your account and your generations, store your library and deliver your files;
  • to take payments and manage your subscription and credits;
  • to send sign-in codes and messages about your account and billing;
  • to keep the Service secure, prevent fraud and abuse, and enforce our Terms;
  • to answer your questions;
  • to tell you when Aventada opens, if you joined the waitlist;
  • to meet our legal obligations, such as tax and accounting rules.

We only send marketing emails if you agreed to receive them, and each one has an unsubscribe link. We don’t sell your personal data, we don’t use it for advertising, and we don’t use your content to train AI models.

05Who we share it with

We use these providers to run Aventada. Each one only gets the data it needs for its job:

  • Hostinger: our servers, located in the United States.
  • Cloudflare: delivers the site and protects it from attacks. Traffic passes through it, including IP addresses.
  • Stripe: payments and subscriptions.
  • AI model providers: kie.ai and BytePlus (ModelArk), and as fallbacks Google, OpenAI and Kling. They receive your prompts and the images you add to a generation, and return the result.
  • OpenAI: transcribes your voice prompts.
  • Brevo: sends our emails, such as sign-in codes and billing messages.

When you connect an AI app, we share with it what it needs to work for you, such as the status of your generations, links to their results and your credit balance. That app’s provider handles the data under its own privacy policy.

We may also share data when the law requires it, to protect the rights and safety of people or of the Service, or as part of a merger, acquisition or sale of assets, in which case this policy keeps applying to your data.

06International transfers

We’re based in the United States and our servers are there. Some of our providers process data in other countries. If you’re in the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards recognised by your law for these transfers, such as the European Commission’s standard contractual clauses or the provider’s certification under the Data Privacy Framework.

07How long we keep it

  • Your account and content are kept while your account is open. When you delete your account, we delete it with your uploads, your generated files and your profile photo. Copies in our backups are overwritten after a limited time.
  • Billing records are kept as long as tax and accounting law requires, even after your account is deleted.
  • Server logs are kept for a limited time, for security and troubleshooting.
  • Sign-in codes expire after 10 minutes, and a sign-in lasts up to 30 days.
  • Waitlist emails are kept until we’ve told you that Aventada is open, or until you ask us to remove yours.

08Your rights

You can update your name, photo and email address, and delete your account, from the studio settings at any time. You can also ask us to:

  • give you a copy of your data, including in a portable format;
  • correct or delete it;
  • stop or limit some uses of it, or withdraw your consent.

Write to support@aventada.ai from the email on your account. We may need to confirm it’s you, and we answer within the time the law gives us. These rights apply wherever you live, including under US state privacy laws such as California’s. If you’re in the EEA, the UK or Switzerland, you can also complain to your data protection authority.

09Cookies

We only use cookies that the site needs to work:

  • av_session keeps you signed in, for up to 30 days.
  • av_lang remembers your language.
  • av_rail remembers whether the studio menu is collapsed.

If you write a prompt on our home page before signing in, your browser keeps it in its session storage until you reach the studio or close the tab. If you arrive through a friend’s share link or a campaign link, the tab also keeps those tags until you close it, so the waitlist can credit your friend. Cloudflare may set cookies needed to protect the site from bots. We don’t use analytics, advertising or tracking cookies.

10Security

Your connection to Aventada is encrypted, sign-in codes and access tokens are stored only in hashed form, and access to our systems is restricted. No system is perfectly secure: if a breach affects your data, we’ll tell you as the law requires.

11Children

Aventada is for people aged 18 and over. If we learn that we hold data about someone younger, we delete it.

12Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we’ll tell you by email or in the Service before it takes effect.

13Contact

Aventada is operated by Subicon LLC, a New Mexico limited liability company.

8206 Louisiana Blvd NE, Ste A #8276, Albuquerque, NM 87113, USA
support@aventada.ai