JJlily
Template — review with legal counsel before launch

Last updated: 2026-06-10

Privacy Policy

This Privacy Policy explains how Jlily(“we”, “us”, or “our”) collects, uses, and shares personal data when you use jlily.ai. By using the Service you agree to the practices described here.

This document is a template and contains placeholder language. It must be reviewed and adapted by qualified legal counsel before launch.

1. Data We Collect

  • Account data. When you sign up or sign in, our identity provider (Keycloak via OIDC) processes your email, a unique identifier, and authentication details. We do not store your password.
  • Uploaded images & assets. The product photos, brand assets, and prompts you submit to generate creatives.
  • Generated content. The images and outputs the Service produces for you.
  • Usage data. Logs, device and browser information, IP address, feature usage, credit consumption, and diagnostic events.
  • Payment metadata. When you purchase credits, Lemon Squeezy (our merchant of record) processes your payment. We receive limited metadata such as order ID, purchased package, billing country, and tax status. We do not receive or store full card numbers.

2. How We Use It

  • To provide, operate, and secure the Service.
  • To generate the images and creatives you request.
  • To process purchases and manage your credit balance.
  • To monitor, debug, prevent abuse, and enforce our Acceptable Use Policy.
  • To communicate with you about your account, transactions, and service updates.
  • To comply with legal obligations.

3. Image / Asset Storage & Retention

Uploaded images and generated content are stored in object storage so you can access your library. We retain these assets while your account is active and for a limited period afterward to allow recovery and to meet legal or operational requirements, unless you delete them sooner. Deleted assets are removed from active systems and purged from backups on a rolling schedule.

4. Third-Party Processors

We rely on trusted third parties to operate the Service. These processors may handle data on our behalf under appropriate agreements:

  • AI model providers — to generate images from your uploads and prompts.
  • Object storage providers — to store uploaded and generated assets.
  • Keycloak (identity provider) — for authentication and account management.
  • Lemon Squeezy — as merchant of record to process payments and taxes.

5. Cookies & Sessions

We use strictly necessary cookies and session tokens to keep you signed in and to secure your session. We may use limited analytics to understand and improve the Service. We do not sell your personal data. Where required, we will request consent for non-essential cookies.

6. Data Retention & Deletion

We keep personal data only for as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. You can delete individual assets at any time, and you may request deletion of your account, after which we will delete or anonymize your personal data, subject to limited retention required by law.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at privacy@jlily.ai. We will respond within the timeframe required by applicable law.

8. International Transfers

We and our processors may store and process data in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) as required by applicable law.

9. Children

The Service is not directed to children and is intended for users who are at least 18 years old, or the age of majority in their jurisdiction. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and isolation of stored assets. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice where required.

12. Contact

For privacy questions or requests, contact privacy@jlily.ai.