1. Introduction

This Privacy Policy explains how Nomel Hungary Kft. (“AI Genere”, “we”, “us” or “our”) processes personal data when you visit aigenere.com, create an account, generate or edit images, upload reference images, purchase credits or use our digital products.

AI Genere is operated from Hungary. The EU General Data Protection Regulation (“GDPR”) and applicable Hungarian data protection laws form the principal framework for our processing.

Your gallery is private. AI Genere does not provide a public user gallery, and we do not publish your generations in a public user gallery. Private storage still involves processing by the service providers needed to operate the service, as described below.

2. Who We Are

The controller responsible for the personal data described in this Policy is:

Nomel Hungary Kft.
Registered address: 2890 Tata, Komáromi utca 111/B, Hungary
Privacy contact: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telephone: +36 30 773 4978
Hungarian tax number: 22730877-2-11
EU VAT number: HU22730877
Website: https://aigenere.com

3. Personal Data We Process

Account information

We process your username or nickname, email address, user identifier, password hash, and account registration and administration records. Passwords are stored as hashes rather than in readable form.

Image generation information

We process the prompts and reference images you submit, generated images, selected models, generation settings, task identifiers, processing status and error information. Prompts and images may contain personal data about you or other people.

Purchases, credits and digital products

When you make a purchase, we process the information needed for the order, payment, invoicing and delivery. Depending on the transaction, this includes your name or company name, email address, billing address, country, tax details, purchased items, amounts, currency, payment references and transaction status. We also process credit allocations, reservations, usage, expiry and adjustments. For software products, we process relevant licence, download, update and support entitlements.

Technical information and communications

Operating the website involves IP addresses, session identifiers, request timestamps and technical request information. Depending on the relevant system, this can include browser and device information, access records and error records. We also process messages and information you provide when contacting us.

4. Purposes and Legal Bases

• Contract performance — Article 6(1)(b) GDPR: creating and operating your account, processing generation requests, displaying private results, administering credits, fulfilling purchases and providing contracted support.
• Legal obligations — Article 6(1)(c): maintaining required accounting and tax records, issuing invoices and complying with binding legal requirements.
• Legitimate interests — Article 6(1)(f): protecting accounts and systems, investigating faults and abuse, handling enquiries and establishing, exercising or defending legal claims. Our interests are reliable and secure operation and protection of our business and users, subject to your rights and interests.
• Consent — Article 6(1)(a): optional analytics and associated technologies where consent is required, and other processing expressly presented to you as optional and consent-based.

Essential account and transaction information is needed to provide the corresponding service. If you do not supply it, we may be unable to create your account, fulfil your request or complete your purchase. Optional analytics consent is not required to use the core service.

5. Prompts, Reference Images and AI Processing

To fulfil your request, we send the necessary prompt, reference images and generation parameters to external AI infrastructure. AI Genere currently uses the KIE API, through which different models are available. Processing may involve KIE and the infrastructure or model operators used for the selected model.

Reference images are stored on our hosting infrastructure and made available to the generation service as necessary to process your request. Generated images are downloaded to our hosting infrastructure for display in your private gallery.

Only upload material that you are entitled to use and disclose for this purpose. Where other people are identifiable, ensure that you have an appropriate legal basis for submitting their personal data. Your responsibility does not remove our own obligations as controller.

Please avoid submitting sensitive personal information that is unnecessary for image generation. Images or prompts can disclose health information, beliefs, sexual life or other sensitive matters. A photograph of a face is not automatically special-category biometric data; this depends on its processing, including whether it is used for unique identification.

Rules on permitted content, likenesses, intellectual property and prohibited uses are addressed separately in our Terms of Service and acceptable-use rules.

6. Private Galleries and Operator Access

Your generations are not automatically published or made available in a public user gallery. The operator’s administrative access is limited to the person administering AI Genere. Access may be needed to investigate a support request, diagnose a technical issue, address suspected abuse or meet a legal obligation.

Private galleries do not mean end-to-end encryption or that no service provider can technically process the underlying files. Hosting and AI providers process content as required by their roles. Do not assume that an image address copied outside your account provides the same protection as the authenticated gallery interface.

If you download or disclose an image yourself, copies held by recipients or on your devices are outside our gallery deletion process.

7. Third-Party AI Provider

KIE identifies its operator as NEXUSAI SERVICES LLC, United States. Its published API documentation states that generated media are retained for 14 days and text/metadata logs for two months. Its separate File Upload API states a 24-hour retention period for files uploaded through that facility. The applicable facility depends on the technical route used.

These periods concern KIE’s published practices and are separate from deletion in AI Genere’s own systems. They do not establish the retention periods of every downstream model operator.

We do not represent that all external providers prohibit training or service-improvement uses, that every provider copy is deleted immediately upon your request, or that our gallery deletion automatically deletes their records. KIE’s public documents do not provide a complete account of all API processing locations, downstream recipients or training practices.

Provider information: KIE Privacy Policy, KIE Terms of Use and KIE API documentation. These documents supplement, and do not replace, our responsibility for lawful processing.

8. Payments and Billing

Payments are processed through the payment provider identified at checkout. That provider’s privacy notice explains its processing of payment credentials, authentication and fraud-prevention information.

We process the order and billing details needed to initiate and reconcile payment, issue invoices, manage refunds and provide purchased credits or products. The information exchanged depends on the payment method and includes relevant transaction references and payment status.

Deleting your account or gallery does not require us to delete records that must be retained for accounting, tax or legal purposes. We restrict retained records to the purposes that justify their continued storage.

9. Cookies, Google Analytics and Google Tag Manager

We use cookies and similar technologies for essential website functions, including sessions, authentication, security, language preferences and recording cookie choices. Where a technology is strictly necessary for a service you request, it is used without optional analytics consent.

We use System – n3t Cookie Consent to manage cookie preferences. Google Analytics sends analytics data only after you consent. It helps us understand visits and website usage and can process information about page interactions, devices, browsers and technical identifiers.

Google Tag Manager manages the deployment of website tags. The processing performed through it depends on the tags enabled; it is not a separate legal basis for analytics or advertising.

You can withdraw or change optional consent through the website’s cookie preference controls. Withdrawal does not affect the lawfulness of earlier processing. Further information about Google’s processing is available in Google’s Privacy Policy. The cookie preference interface provides the available categories and choices.

10. Our Globe Visitor Statistics

Our own Globe visitor measurement uses the visitor’s IP address to determine an approximate geographical location and, where necessary, filter repeat visits. We delete the IP address after geographical location has been determined and any necessary repeat-visit filtering has been completed.

Longer-term Globe statistics are retained without IP addresses or other identifiers allowing visitors to be identified. This IP-deletion rule concerns the Globe measurement system; separate hosting, security and payment records may process IP addresses for their own purposes.

11. Service Providers and Other Disclosures

Recipients, as necessary for the relevant purpose, include hosting and backup providers, AI processing providers, the selected payment provider, Google for consented analytics, and providers used to deliver service communications. Accountants, professional advisers and competent authorities may receive information where required for accounting, advice, a legal obligation or legal claims.

Our website uses Hostinger hosting, with the website server located in the United States. Hostinger processes hosted files, databases and backups as part of its hosting services. See the Hostinger Privacy Policy and Data Processing Addendum.

We disclose personal data only for a relevant purpose and limit the information to what that purpose requires. A provider may act as a processor under our instructions or as an independent controller for particular activities, such as regulatory compliance by a payment provider.

12. International Transfers

Although we are established in Hungary, use of our US hosting and external AI infrastructure involves processing outside the European Economic Area. Other providers may also process data internationally.

Transfers subject to the GDPR’s international-transfer rules require an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with any necessary additional measures. Hostinger’s published Data Processing Addendum includes international-transfer provisions. The applicable arrangements must be assessed for the actual provider and processing involved; a provider’s US address does not itself establish a lawful transfer mechanism.

You may contact us for information about the safeguards applicable to your data and how to obtain a copy, subject to lawful redactions. Using the website is not treated as blanket consent to international transfers.

13. Retention and Deletion

• Generated images, reference images, prompts and generation history: deleted from our active system after 14 days. This is temporary storage, not a permanent archive. Download any results you wish to keep.
• Manual image deletion: deleting an image through your account also deletes its associated reference images and prompt from the active system.
• Account information: retained while your account remains active and needed to provide the service. You can delete your account yourself. Information needed for a separate legal obligation or claim may be retained for that purpose.
• Credit and software entitlement records: retained as needed to administer your balance or continuing entitlement and resolve related issues; records supporting accounting or tax obligations follow the statutory periods below.
• Invoices and accounting records: retained for the applicable statutory period, including at least eight years for accounting vouchers under Hungarian accounting law. Where the EU VAT One Stop Shop rules apply, the required records are retained for ten years from the end of the transaction year.
• Technical records, failed-task information and correspondence: retained only as necessary to investigate the relevant fault, protect the service, answer an enquiry or deal with a specific legal obligation or claim. Retention must reflect that purpose rather than indefinite storage by default.
• Globe IP addresses: deleted as described in Section 10.
• Backups: Hostinger’s daily backups are retained for seven days. Data deleted from the active system may remain in a previously created backup until that backup expires.
• External provider records: subject to the applicable provider arrangements and retention rules, separately from our active-system deletion.

Account deletion does not automatically erase records maintained by independent controllers. If you need help with deletion beyond the controls in your account, contact us.

14. Security

We use HTTPS/TLS to protect website traffic in transit, password hashing, account-based access controls, restricted administrative access and daily hosting backups. We review security measures in light of the processing and associated risks.

No online service or storage system is completely secure. Keep your login credentials confidential and contact us promptly if you suspect unauthorised access.

15. Your Rights

Subject to the conditions and exceptions in applicable law, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your situation. You may withdraw consent at any time where processing relies on it.

Send requests to This email address is being protected from spambots. You need JavaScript enabled to view it.. Where reasonably necessary, we may request proportionate information to verify your identity.

We respond without undue delay and normally within one month. Complex or numerous requests may require up to two additional months; we will explain any extension within the first month. Requests are normally free. A reasonable fee or refusal is permitted only in the circumstances allowed by law, such as manifestly unfounded or excessive requests.

If we cannot fulfil a request, we will explain the reason and your options for complaint or judicial remedy. Erasure is not absolute, particularly where continued storage is legally required.

16. Children’s Privacy

Children’s personal data requires particular protection. Where we rely on consent for an online service offered directly to a child, the applicable age for independent consent and any required parental authorisation apply. Rules concerning a minor’s ability to make purchases or enter contracts apply separately.

If you are a parent or guardian and believe a child has provided personal data without legally required authorisation, contact us so we can investigate and take appropriate action.

17. Complaints

You can contact us about any privacy concern. You also have the right to complain to a competent supervisory authority, including in the EU country of your habitual residence, place of work or the alleged infringement.

Our Hungarian supervisory authority is:
National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11, Hungary
Postal address: 1363 Budapest, Pf. 9, Hungary
Website: https://www.naih.hu

Please consult NAIH’s website for current submission methods. You do not have to contact us before making a complaint.

18. Changes and Contact

We may update this Policy to reflect changes in the service, providers or legal requirements. The revision date appears above. Where required, we will provide additional notice or obtain fresh consent before relevant changes take effect.

Contact Us

For questions or requests concerning this Policy, contact Nomel Hungary Kft. at This email address is being protected from spambots. You need JavaScript enabled to view it., or write to 2890 Tata, Komáromi utca 111/B, Hungary.