Skip to main content
Heretake

Privacy Policy

Last updated: October 30, 2026.

Scope and contact

This policy explains personal-data processing for Heretake at https://heretake.com. For privacy questions, requests or complaints, email support@heretake.com. Our Terms of Service explain usage and payment rules.

Website analytics

We use Google Analytics 4 to understand public-page visits, traffic sources, scene usage and purchases. It uses analytics cookies and processes information such as browser/device details, approximate location and interactions. Our explicit events include scene names, output counts and, for completed real-money purchases, a transaction reference, currency and value. We do not send your uploaded photos, generated images, email, name or account ID to Analytics. We remove URL query parameters from page events and exclude administrator activity, private account pages and test purchases. Advertising personalization and Google signals are disabled in our site integration.

Google processes analytics data under its privacy policy. You can block analytics using browser privacy controls or the Google Analytics opt-out add-on. Analytics reports may be incomplete when tracking is blocked; our billing records remain the source of truth for payments.

Data we handle

  • Google sign-in supplies account identifiers, email and basic profile information such as your name and profile image. Email/password registration stores your email, name, password hash and verification records. We store account and session records to authenticate you.
  • Your uploaded reference photos, text descriptions, chosen scene, style or model, generation status and generated images are processed to create and deliver your results.
  • Credit debits, returned credits, purchase references, payment status and refund records support billing and fraud prevention. Card details are entered on Waffo's hosted checkout; Heretake does not store full card numbers or card security codes.
  • Messages you send to support and relevant technical records, such as request times, IP addresses and error information handled by our infrastructure, help resolve problems and protect the service.

Reference photos contain information about the appearance of the people shown. We use them to generate images, not to authenticate identity through facial recognition. Single-person scenes use your own adult photo. Couple and wedding scenes accept you and one other adult with their explicit permission; both reference photos are processed, stored privately and cleaned up under the same rules. Avoid including extra people or unnecessary sensitive information.

Purposes and service providers

We process data to provide account access, generate and store images, deliver downloads, record credit balances and payments, respond to requests, and investigate abuse. Where a legal basis is required, we rely on performance of the service contract, applicable legal obligations, legitimate interests in security and support, or consent where required. You can contact us to discuss the basis for a particular activity.

Cloudflare hosts the application, D1 database and private R2 image storage. Google provides optional sign-in, and Resend delivers account verification and password-reset emails. Scenes use ByteDance Seedream 5.0 Lite. Studio offers Seedream 4.5, Seedream 5.0 Lite, Google Nano Banana 2 and GPT Image 2. GPT Image 2 uses APIMart’s extended channel. Existing Nano Banana Pro jobs retain their original processing model. APIMart provides access to these models; Seedream 4.5 fallback requests use the same model through OpenRouter (bytedance-seed/seedream-4.5). The selected generation service and its model-processing infrastructure receive the reference photos and scene instructions needed for the request. The current model lineup is listed in our Terms of Service; we will update these disclosures when new models or processing services are introduced. Waffo Pancake processes payments, receipts and refunds and may process payment data under its own privacy terms.

Provider processing and retention are subject to their policies and contracts. We do not promise that every provider immediately deletes all request data. Heretake does not sell your personal data or use your selfies and outputs to train its own models. We do not make your creations public by default. Authorized support review is limited to what is needed to resolve a request, investigate abuse or meet a legal obligation.

Providers may process information outside your country. Applicable transfer safeguards depend on the provider and destination; contact us for information relevant to your data. We may disclose necessary records when legally required or to protect users against fraud or serious harm.

Storage and retention

Uploaded source photos are held temporarily in private storage while a generation runs and are deleted from that storage when the job finishes. A one-day storage lifecycle rule provides additional cleanup; deletion timing can depend on storage processing. This does not describe retention by external generation providers.

Completed images and generation records remain available in your account until removed following a deletion request or account closure, subject to necessary legal or security retention. Account information remains while the account is active. Payment, refund and security records may need to be retained longer to meet applicable accounting obligations, resolve disputes or investigate fraud. We explain any relevant exception when responding to a deletion request and limit retained records to that purpose.

We use authenticated access and private storage to limit access to creations. No internet service can guarantee absolute security. Download images you wish to keep before requesting deletion or closure.

Your data rights and account closure

You can view and download your completed images in My creations, see purchase history on Pricing, and see your account email in the account menu. For a copy of other personal data, correction of inaccurate records, deletion of images or personal data, or closure of your account, email support@heretake.com from your registered email. Describe the request and relevant image or order references; do not send passwords or payment card details.

We may verify that you control the account before disclosing or deleting data. We aim to acknowledge requests within two business days and respond within 30 days, or sooner where applicable law requires. If a permitted extension is needed, we will explain the reason and expected timing. Requests are ordinarily free; any legally permitted fee or refusal will be explained.

Depending on your location, you may also have rights to portability, restriction of processing, objection to certain processing, withdrawal of consent and a complaint to your local data-protection authority. Withdrawing consent does not undo processing already lawfully performed. We will consider requests under the law that applies to you.

Account closure is handled through support rather than a self-service button. Before closure, download wanted images and discuss any unused purchased credits with us. We remove or de-identify account data and images that are no longer needed, revoke access, and explain any payment, legal, security or backup records that cannot yet be erased. Requesting deletion does not require you to waive statutory refund rights.

Cookies, children and policy updates

Session cookies are used to keep you signed in and protect authentication. You can remove or block cookies in your browser, although account features may stop working. We may also store your interface theme preference in browser local storage. Provider checkout and sign-in pages may use their own cookies.

The service is intended only for adults aged 18 or older. Do not upload images of children. Contact support if you believe we hold a child's personal data so we can investigate and remove it as appropriate.

We publish changes here with an updated date and provide additional notice for material changes where required. Send any privacy concern or content report to support@heretake.com.