Privacy Policy

Last Updated: October 22, 2025

At Icebox (“Icebox,” “we,” “our,” or “us”), we are committed to protecting your privacy and being transparent about how we collect, use, and share your information. This Privacy Policy explains our practices regarding information collected through our website at https://icebox.cloud/ and our AI Image Generator services (collectively, our “Services”).

1. Information We Collect

We collect minimal information necessary to provide and improve our Services. The information we collect falls into the following categories:

1.1 Information You Provide Directly

Type of Information	Description	Purpose
Text Prompts (Input)	Text descriptions you enter to generate images	To generate AI images based on your descriptions
Feedback Submissions	Comments, suggestions, or bug reports you submit voluntarily	To improve our Services and respond to your feedback
Email Address (Optional)	Email you provide when submitting feedback	To follow up on your feedback or inquiries
Contact Information	Information you provide when contacting support	To respond to your inquiries and provide support

1.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type and version
• Usage Information: Pages visited, features used, time spent on pages, interaction patterns
• IP Address: Your Internet Protocol address (anonymized for analytics)
• Log Data: Server logs including access times, error messages, and referral URLs
• Cookies and Tracking: Session cookies, analytics cookies, and preference cookies

1.3 Information from Third Parties

We may receive information from:

• Analytics Providers: Google Analytics, usage statistics, and performance metrics
• Security Services: Fraud detection and prevention services
• Advertising Partners: Ad performance and campaign metrics (if applicable)

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Maintain Services

• Process your text prompts and generate AI images
• Deliver requested Services and features
• Maintain and improve Service functionality
• Monitor Service performance and uptime

2.2 To Improve and Develop Services

• Analyze usage patterns and trends
• Develop new features and improvements
• Train and improve AI models (using anonymized, aggregated data only)
• Conduct research and analytics

2.3 To Communicate With You

• Respond to your inquiries and feedback
• Send service announcements and updates
• Provide customer support
• Send notifications about changes to our Services or policies

2.4 To Ensure Safety and Security

• Detect, prevent, and address fraud and abuse
• Enforce our Terms of Service and policies
• Protect against security threats and vulnerabilities
• Comply with legal obligations and law enforcement requests

2.5 For Legal and Compliance Purposes

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from government authorities
• Establish, exercise, or defend legal claims
• Protect the rights, property, or safety of Icebox, our users, or others

3. How We Share Your Information

We may share your information only in the following limited circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who help us operate our Services:

• Cloud Infrastructure: Hosting and storage providers (e.g., AWS, Google Cloud)
• Analytics Services: Google Analytics for usage statistics
• Content Delivery Networks (CDN): To deliver content efficiently
• Security Services: Fraud detection and DDoS protection

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.2 Legal Requirements

We may disclose information if required by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Government or regulatory requests
• Law enforcement inquiries
• Protection of our rights, property, or safety
• Prevention of illegal activities or violations of our Terms

3.3 Business Transfers

If Icebox is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.

3.4 With Your Consent

We may share information with third parties when you explicitly consent to such sharing.

4. Data Retention

Type of Data	Retention Period	Reason
Text Prompts	Not stored (temporary processing only)	Privacy-first approach
Generated Images	Not stored (unless you explicitly save to Gallery)	Privacy and storage optimization
Gallery Images (if saved)	Until you delete or until moderation removal	To display in public gallery
Feedback Submissions	Retained indefinitely or until deletion request	Service improvement and support
Log Data	30-90 days	Security, debugging, and analytics
Analytics Data	14-26 months (anonymized)	Usage patterns and improvements

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

5.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you
• Right to Portability: Receive your information in a structured, machine-readable format

5.2 Correction and Deletion

• Right to Correct: Request correction of inaccurate or incomplete information
• Right to Delete: Request deletion of your personal information (subject to legal obligations)

5.3 Restriction and Objection

• Right to Restrict: Request limitation of processing of your information
• Right to Object: Object to processing based on legitimate interests or for direct marketing

5.4 Withdraw Consent

Where we rely on your consent to process information, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5.5 How to Exercise Your Rights

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze usage of our Services.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic Service functionality	Session or up to 1 year
Analytics Cookies	Understand how visitors use our Services	Up to 2 years
Preference Cookies	Remember your settings and preferences	Up to 1 year
Advertising Cookies	Deliver relevant ads and measure campaign performance	Up to 13 months

6.2 Managing Cookies

You can control cookies through your browser settings:

• Block Cookies: Most browsers allow you to block all cookies
• Delete Cookies: Clear cookies stored on your device
• Third-Party Cookies: Opt out of third-party advertising cookies via industry opt-out tools

6.3 Do Not Track

Some browsers include a “Do Not Track” (DNT) feature. Our Services do not currently respond to DNT signals, but we respect your privacy choices through cookie settings.

7. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices or content of these third parties.

8. Children’s Privacy

Our Services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18.

• If you are under 18, you may only use our Services with parental supervision
• Parents or guardians are responsible for monitoring their children’s use of our Services
• If we learn we have collected information from a child under 18, we will delete it promptly

If you believe we have collected information from a child under 18, please contact us at [email protected].

9. International Data Transfers

Our Services are operated from Indonesia. If you access our Services from outside Indonesia, your information may be transferred to, stored, and processed in Indonesia or other countries where our service providers operate.

By using our Services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

10. Data Security

We implement appropriate technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

Security Measures Include:

• Encryption: Data encryption in transit (HTTPS/TLS) and at rest
• Access Controls: Restricted access to personal information on a need-to-know basis
• Secure Infrastructure: Use of reputable cloud providers with robust security
• Regular Security Audits: Periodic review and testing of security systems
• Incident Response: Procedures for detecting and responding to security breaches
• Employee Training: Regular security and privacy training for team members

11. Your Responsibilities

You also play a role in protecting your information:

• Keep Credentials Secure: If accounts are introduced, protect your login credentials
• Use Secure Connections: Access our Services over secure networks
• Report Suspicious Activity: Notify us immediately of any unauthorized access
• Review Privacy Settings: Regularly check and update your privacy preferences

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Your CCPA Rights:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of personal information we have collected
• Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your CCPA rights

To exercise these rights, contact us at [email protected] with the subject line “CCPA Request.”

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing:

• Consent: You have given consent for specific purposes
• Contract: Processing is necessary to perform our Services
• Legitimate Interests: Processing is in our legitimate interests (e.g., security, analytics)
• Legal Obligation: Processing is required by law

Your GDPR Rights:

• Right to access, correct, delete, or restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements.

Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

---

16. Specific Service Provisions

16.1 AI Image Generation

16.2 Gallery Feature

If you choose to save your generated image to our public Gallery:

• The image and prompt become publicly visible
• The image is stored on our servers until removed by moderation or you request deletion
• Your IP address is logged for moderation purposes only
• Images may be featured in our gallery showcase

16.3 Blog and Content

When you read our blog posts or articles:

• We collect standard analytics data (page views, time on page)
• Comments or interactions may be stored and displayed publicly
• Social sharing may involve third-party platforms (Facebook, Twitter, etc.)

16.4 Feedback System

When you submit feedback:

• Your feedback is stored indefinitely for service improvement
• Email addresses (if provided) are used only for follow-up communication
• Feedback may be displayed publicly in anonymized form
• We may contact you to clarify or discuss your feedback

---

© 2025 Icebox. All rights reserved.