Privacy Policy

We collect information in three ways: what you give us, what you create, and what we observe.

• Account information, your email address, a username/handle, and authentication details, handled by Google Firebase Authentication. If you sign in with Google, we receive basic profile information from your Google account.
• Payment information, when you subscribe, buy credits, or make a purchase, payment is processed by Stripe. We do not store your full card number; we keep limited records such as a Stripe customer ID, subscription status, and purchase history.
• Seller & payout information, if you sell, Stripe collects the identity and bank/payout details needed to pay you (via Stripe Connect). We receive payout status and transaction records, not your full banking credentials.
• Content you create, the prompts you write, the projects, assets, listings, storefront details, uploaded files (images, audio, video), and messages you send through the Service.
• Usage & device data, how you interact with the Service, plus technical data such as IP address, browser/device type, and log and analytics events, used to operate, secure, and improve the Service.

The builder uses artificial intelligence to turn your prompts and inputs into output. To do this, we send your prompts and relevant project context to trusted third-party AI service providers that generate the result and return it to us. We don't use these providers to sell your data, and we work with providers that contractually limit their use of your inputs. Don't put information into a prompt that you wouldn't want processed this way.

• provide, maintain, and secure your account and the Service;
• run the builder, host your published projects, and deliver purchases;
• process payments, credits, payouts, taxes, refunds, and disputes;
• meter usage (credits, storage, bandwidth) and enforce limits and these policies;
• moderate content, prevent fraud and abuse, and comply with legal obligations;
• respond to support requests and send service-related communications; and
• understand usage and improve the Service.

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers, Google Firebase and Google Cloud (accounts, database, storage, hosting), Stripe (payments and payouts), and AI service providers (generation), each under their own terms and privacy policies.
• Other users & the public, information you choose to make public, such as your username, storefront, published projects, listings, and content you sell, is visible to others. Buyers and Sellers exchange limited information needed to complete a sale.
• Legal & safety, to comply with law, enforce our terms, or protect the rights, safety, and security of Joisk, our users, and the public.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We keep your information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to meet legal, tax, accounting, security, and dispute-resolution obligations. We may retain limited records of transactions and content others have purchased even after you delete the original.

You can update your account details, cancel your subscription, and manage billing from your account. Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing (for example under the GDPR or CCPA/CPRA). To make a request, or to ask us to delete your account, contact us via the contact page or at privacy@joisk.com. We'll respond as required by applicable law and won't discriminate against you for exercising these rights. Canadian users have rights under PIPEDA and may contact us or, if unsatisfied, the Office of the Privacy Commissioner of Canada.

Where the GDPR applies, we process personal information on the legal bases of performing our contract with you (providing the Service), our legitimate interests (securing, operating, and improving the Service and preventing abuse), your consent (where we ask for it, such as certain cookies), and compliance with legal obligations. Where required, cross-border transfers rely on appropriate safeguards such as Standard Contractual Clauses. We honor recognized browser opt-out signals, including Global Privacy Control (GPC), as a request to opt out where applicable law requires.

We use cookies and similar technologies (including a session cookie and those set by Firebase and Stripe) to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser, though some features may not work without them.

We use technical and organizational measures to protect your information, and rely on established providers (Google, Stripe) for core infrastructure. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security. If you discover a vulnerability, please report it via our security page.

The Service isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has provided us information, contact us and we'll delete it.

We operate from, and use service providers located in, the United States and other countries. By using the Service, you understand your information may be transferred to and processed in countries with different data-protection laws than your own.

Joisk lets creators add sign-in, a database, contact/lead forms, and similar features to the apps, sites, and stores they build. When end users of a creator's published projectprovide information through those features (for example, they create an account in a creator's app or submit a creator's contact form), the creator is the controllerof that information and is responsible for how it's collected and used, for having a lawful basis and a privacy notice of their own, and for honoring their end users' requests. Joisk acts as a processorand stores and processes that data on the creator's behalf to run the feature (passwords are stored only in salted, hashed form; we don't use end-user data for our own marketing). If you are an end user of a project built on Joisk and have a request about your data, contact that project's creator; we'll assist them as required by law.

We may update this Policy from time to time. If we make material changes, we'll update the “Last updated” date and, where appropriate, provide additional notice.

Questions about your privacy, or want to exercise a data right? Email privacy@joisk.com or use our contact page.

Joisk Studios Inc. · Ontario, Canada