Privacy Policy
Last updated: March 2026
1. Information We Collect
We collect the following information when you use Agent.nl:
- Account data: email address, name, and password (hashed)
- Usage data: generation history, credit transactions, API usage
- Uploaded content: product images you upload for generation
- Technical data: IP address, browser type, session data
2. How We Use Your Information
We use your information to:
- Provide and improve the Service
- Process payments and manage your account
- Send transactional emails (verification, receipts)
- Send product updates if you subscribed to our newsletter
- Prevent fraud and enforce our Terms of Service
3. Third-Party Services
We share data with the following trusted third parties to provide the Service:
- OpenAI — image generation and chat (GPT Image, GPT-4)
- Fal.ai — FLUX Pro and CAT-VTON image generation
- Stripe — payment processing
- Hetzner — cloud hosting in the EU
4. Data Retention
We retain your account data for as long as your account is active. Uploaded images are stored for up to 12 months. You may request deletion of your data at any time by contacting us.
5. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict processing
- Data portability
To exercise these rights, please contact us.
6. Cookies
We use three categories of cookies. Strictly necessary cookies handle authentication (JWT token storage) and session management; these are always active and cannot be switched off. Analytics cookies are set by Google Analytics 4, which tells us how the site is used. Marketing cookies are set by Google Ads and the Meta Pixel, which measure our advertising and let us reach visitors who have already shown interest.
Analytics and marketing tags are not loaded at all until you accept the matching category in our cookie banner, and we pass your choice on to Google via Consent Mode. You can change or withdraw your consent at any time by reopening the cookie preferences from the banner.
7. Security
All data is encrypted in transit (HTTPS/TLS). Passwords are hashed with bcrypt. We conduct regular security reviews and follow OWASP best practices.
8. Contact
For privacy enquiries, please contact us.