Starholder Privacy Policy

1. Scope

This Privacy Policy describes how Starholder (“Starholder”, “we”, “our”, or “us”) collects, uses, and shares personal information when you access our applications, APIs, and related services (collectively, the “Services”). By using the Services, you agree to the practices described in this policy.

2. Information We Collect

• Account Data. When you register or authenticate, we collect identifiers such as name, alias, email address, preferred username, and any additional profile information you submit.
• Content and Workspace Data. We store the projects, media, prompts, outputs, and other materials that you upload or generate within Starholder. This includes metadata, revision history, and relationships between system-generated assets and user-provided source material.
• Usage and Device Data. We automatically log technical information including IP address, browser or device type, timestamps, referring URLs, pages viewed, feature usage, diagnostic events, and cookie identifiers to secure the platform and improve performance.
• Payment and Billing Data. If you participate in paid features, we collect limited billing information (such as transaction IDs) through our payment processor. Sensitive payment card data is handled directly by the processor and never stored on our servers.

3. How We Use Information

Starholder processes personal information for the following purposes:

• Authenticate and authorize users, including through social identity providers;
• Operate, personalize, and improve the Services, including content generation workflows;
• Provide customer support, respond to requests, and communicate announcements;
• Conduct analytics, research, and monitoring to maintain platform stability and security;
• Detect, investigate, and prevent security incidents, abuse, or violations of our Terms;
• Comply with applicable legal obligations and enforce our agreements.

4. Sharing and Disclosure

We share personal information only in the following circumstances:

• Service Providers. We engage trusted vendors for hosting, authentication, storage, analytics, communications, and support. These providers access information only to perform services on our behalf under confidentiality obligations.
• Legal and Safety. We may disclose information if required by law or when we believe it is necessary to protect Starholder, our users, or the public from harm, fraud, or malicious activity.
• Business Transfers. In the event of a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before personal information becomes subject to a different privacy policy.

We do not sell your personal information. We do not share personal information with advertisers for their independent marketing purposes.

5. Content Ownership and Generated Assets

Starholder operates a hybrid ownership model:

• System-Generated Materials. Assets produced by Starholder’s proprietary models or workflows are owned by Starholder. We grant the account that initiated creation a perpetual, worldwide, royalty-free license to use such outputs commercially, subject to our Terms of Service.
• User-Supplied Content. You retain all rights (including copyright and commercial rights) in the original content you upload or create outside the system. By submitting such materials, you grant Starholder a non-exclusive license to store, process, adapt, publish, and distribute them as necessary to deliver the Services and to incorporate them into system-generated outputs.

6. Data Retention and Security

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. We use technical and organizational safeguards, including encryption in transit, access controls, and monitoring, to protect information. No system is completely secure; if we learn of a breach we will notify affected users consistent with applicable law.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, export, or delete personal data, or to object to certain processing. You can exercise these rights through in-product settings or by contacting us at privacy@starholder.xyz. If you authenticate through a third-party provider, you may also manage consent directly with that provider.

8. International Data Transfers

Starholder operates in the United States and may transfer personal information to third countries. Where required, we use approved transfer mechanisms (such as Standard Contractual Clauses) to ensure adequate protection for personal data.

9. Children’s Privacy

The Services are not directed to children under 13 (or older age as required by local law), and we do not knowingly collect personal information from children. If we learn we have collected information from a child without appropriate consent, we will delete it.

10. Changes

We may update this Privacy Policy periodically. If changes are material, we will provide notice via email or prominent in-product messaging. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

11. Contact Us

Questions or concerns can be directed to privacy@starholder.xyz.