Privacy Policy
This Privacy Policy explains how PRONTO LLC, which operates Faive ("Faive", "we", "us"), collects, uses, shares and protects personal information when you use faive.studio and the Faive web application (the "Services"), and the rights you have.
PRONTO LLC is registered in the Qatar Financial Centre (registration number 01750), with its registered address at 2nd Floor, Scale 7 Office (M7 Building JK1 in Phase 1), Msheireb Downtown - P08, Qatar, and is responsible for the personal information described in this policy. We handle personal information in accordance with the QFC Data Protection Regulations 2021 and, where they apply, other data protection laws such as the EU and UK GDPR.
Questions about this policy or your information: hello@faive.studio.
1. Information we collect
Information you give us
- Account information: your email address and password, which we store only in a secure, hashed form, and your name if you provide it.
- Your content: the photographs, video, audio, text prompts and settings you upload or enter, the content we generate for you from them, and how you organise it into projects and folders. Your content may show people.
- Subscription and credit history: your plan, payments, renewals and how you use credits.
- Your settings and choices: such as your cookie choice, any account preferences you set, and, if we offer marketing emails, whether you agree to receive them.
- Acceptance records: when you accepted our Terms and this Privacy Policy, which versions, and your confirmation that you are 18 or older. We record this at sign-up and whenever you accept an updated version.
- Messages to us: if you use our contact form, your name, email address, company (optional), topic and message.
Information we collect automatically
- IP address: used to deliver the Services and images to your device, to protect sign-up and login against bots and abuse, and to limit repeated attempts. Our storage provider receives your IP address whenever your browser loads or uploads an image or video.
- Device and browser information: such as your browser and device type, recorded in our server logs and used by our bot protection.
- Referral information: if you accept analytics cookies, the website you came from and any campaign tags (UTM parameters) in the link you followed, captured when you first arrive and saved to your account when you sign up.
- Analytics information: if you accept analytics cookies, the pages you visit, features you use, events such as signing up, checking out or downloading, and the type and position of elements you click (never their text). This is linked to a random identifier and, once you sign in, your account ID, plan and role.
Information from others
Our payment provider tells us whether your payment succeeded. We never receive your card details.
How we analyse images
We use AI providers, including OpenAI, to analyse and edit the images you submit, for example to position products correctly and to preserve clothing a person is already wearing. We do not use this analysis to identify anyone or to infer their race, ethnicity, religious beliefs or health, and we do not create facial recognition templates or other biometric identifiers.
Sensitive information. Photographs of people can show or reveal sensitive information about them. We process such content only to provide the Services you request, and never to identify, profile or make decisions about anyone. You must have the rights and permissions needed to submit photographs of other people.
2. How we use your information
- To create and manage your account and let you sign in securely.
- To provide the Services, including generating the content you request and checking the quality of results so we can give you the best output.
- To process payments and renew your subscription.
- To send you service emails, such as sign-in codes, receipts, subscription updates and notifications about your content. Our emails contain no tracking pixels or tracked links.
- To send you marketing emails, but only if you agree to receive them.
- To respond to your messages and support requests.
- To protect the Services, our users and us against fraud, abuse and security threats.
- To understand how the Services are used and improve them, using analytics information if you accept analytics cookies.
- To understand which websites and campaigns bring people to Faive, if you accept analytics cookies.
- To show content on our public pages where it has been published.
- To comply with our legal obligations and enforce our Terms.
Your private content is used only to provide the Services you request. We do not use your content to train our own AI models.
3. Our legal bases
- Contract: to provide the Services, manage your account and process payments under our Terms.
- Consent: for analytics cookies and marketing emails. You can withdraw consent at any time.
- Legitimate interests: to keep the Services secure, prevent fraud and abuse, and respond to enquiries, where these interests are not outweighed by your rights.
- Legal obligations: to keep financial records and comply with the law.
4. Who we share information with
We do not sell your personal information or share it for advertising. We share it only with the service providers that help us run Faive, and only as needed for them to provide their services to us.
AI providers. To generate and analyse content, we send your prompts and the files you submit to the providers below. We do not send them your name, email address or account details, although the content you submit may itself contain personal information.
| Provider | Used for | What they receive | Where | How long they keep it |
|---|---|---|---|---|
| Google (Vertex AI) | Images, video, virtual try-on, scene and product analysis, and checking the quality of results | Prompts, images, video | Google data centres worldwide | Set by Google Cloud's terms |
| OpenAI | Image generation and editing, analysis of people and products, and checking the quality of results | Prompts, images | OpenAI's infrastructure, location not selectable | Up to 30 days by default, for abuse monitoring. Not used to train OpenAI's models |
| fal.ai | Video, upscaling and lip-sync | Prompts, images, audio, video | United States and other countries | Up to 30 days |
| xAI | Image and video generation | Prompts, images | xAI's infrastructure, location not selectable | Set by xAI's terms |
fal.ai uses its own sub-processors to run some models, including Kling, ByteDance (Seedance), Vidu, sync.so and xAI.
Other service providers
| Provider | Used for | What they receive | Where |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, file storage, content delivery, and sending emails | All account and application data, your uploaded and generated files, your IP address when files load, and the emails we send you, including delivery status | United States (us-east-1); temporary content-delivery caches worldwide |
| Cloudflare (Turnstile) | Checking that sign-ups and logins come from real people | Your IP address and browser information | Cloudflare's global network |
| Tess Payments | Processing payments on its hosted checkout page | Your email address, order number, amount, currency and description. You enter your card details on Tess's page; they never reach Faive | Doha, Qatar |
| PostHog | Product analytics, only if you accept analytics cookies | Analytics information as described in section 1. It uses your IP address only to work out your country, and does not store it. | European Union |
These providers use your information only to provide their services to us, under their terms with us, and may use their own sub-processors. Tess Payments and Cloudflare also process some information under their own privacy policies; Tess's privacy statement for its checkout is available at checkout.tesspayments.com.
We may also share information:
- On our public pages: content is only shown publicly if it is published. If you choose to publish content, it can be shown on our Discover page and other public pages, and you can unpublish it at any time. Your content stays private unless you publish it. Today, the only published content is content created by our own team; users cannot yet publish their content.
- With authorities: where required by law or to protect our rights, our users or the public.
- In a business transfer: if we are involved in a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.
5. Cookies
We use cookies and similar technologies that are strictly necessary to run the Services, such as keeping you signed in. We use analytics cookies only if you accept them, and nothing is stored or sent for analytics before you do. You can change your choice at any time using the Cookie settings link in the footer or sidebar. See our Cookie Policy for details.
6. Your content
Your uploads, prompts and generated content are stored in your account until you delete them or close your account. They do not expire automatically. Our staff may view your content only when needed for a specific reason, such as responding to a support request or investigating a problem.
Generated content may carry marks or metadata added by our AI providers indicating that it was created with AI. You are responsible for having the right to upload any content, including the consent of any person shown in it.
7. Where your information is processed
Our servers, database and file storage are in the United States. Our AI providers may process your content in the United States and other countries, and Google processes it in its data centres worldwide. Analytics information is stored in the European Union, and payments are processed in Qatar.
To load images and video quickly, we deliver them through AWS's content delivery network, which temporarily caches copies on AWS edge servers around the world. Cached copies are encrypted in transit, cannot be accessed without a signed link, expire automatically within 24 hours, and are removed within minutes when you delete the content.
Some of these countries are not recognised by the QFC, or by the EU or UK, as providing an adequate level of protection. Where that is the case, we protect your information using safeguards permitted under the applicable law, such as our providers' data processing terms and standard contractual clauses. Contact us for more information.
8. How long we keep information
| Information | How long we keep it |
|---|---|
| Account information and settings | For as long as your account exists |
| Your uploads, prompts and generated content | Until you delete them or close your account. No automatic expiry |
| Files held by our AI providers | Varies by provider, as set out in section 4 |
| Acceptance and consent records | For as long as needed to show what you agreed to and when |
| Analytics information | 12 months |
| Server logs, including IP addresses | 30 days |
| Security records that limit repeated attempts | Up to one hour |
| Database backups | 7 days for regular backups |
| Addresses that bounced or reported our emails as spam | Indefinitely, so we don't email them again |
| Contact form messages | As long as needed to deal with your message |
| Payment and billing records | As long as required for legal, tax and accounting purposes, including after your account is closed, with the link to your account removed |
When you delete content or close your account, we remove it from our live systems and file storage. Copies may remain in database backups, in content-delivery caches for a few minutes, and with our AI providers for the periods described in sections 4 and 8, before they are removed.
9. How we protect information
We use technical and organisational measures to protect personal information, including encrypted connections, hashed passwords, access limited to people who need it, and automatic deletion of logs and security records. No method of transmission or storage is completely secure. If a personal data breach affects you, we will notify you and the QFC Data Protection Office where the law requires.
10. Age requirement
The Services are only for people aged 18 or older, and you confirm this when you sign up. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete the account and its information. If you believe someone under 18 has used Faive, contact us at hello@faive.studio.
11. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- have your information deleted;
- object to or restrict how we use it;
- receive a copy of your information in a portable format; and
- withdraw your consent at any time, without affecting processing that took place before.
To exercise these rights, including closing your account and deleting its content, email hello@faive.studio from the email address on your account. We will respond within 30 days. You can also delete individual uploads and generations from your library at any time, change your cookie choice using the Cookie settings link, and unsubscribe from marketing emails using the unsubscribe option in any marketing email, or by emailing hello@faive.studio.
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the QFC Data Protection Office at dataprotection@qfc.qa, or, if you are in the EU or UK, to your local data protection authority.
12. Browser privacy signals
Our website does not respond to Do Not Track or similar browser signals. We use analytics cookies only if you accept them through our cookie banner.
13. Changes to this policy
We may update this policy from time to time and will show the date of the latest version at the top. If we make material changes, such as collecting new types of personal information or using it for new purposes, we will notify you before they take effect, by email or through the Services, and ask you to review and accept the updated policy the next time you sign in or visit.