Legal

Privacy Policy

Last updated: March 2026

1. Who controls your data

David Vijay Mattu, trading as Skalm, is the data controller under GDPR. Contact: hello@skalm.space

2. What we collect

  • Account data: email address, name (optional)
  • Usage data: generations created, credits used, feature interactions
  • Payment data: billing info processed by Stripe — we never store card details
  • Images: files you upload for processing — deleted from processing servers after generation completes
  • Technical data: IP address, browser type, device info

3. Why we collect it

DataPurposeBasis
Account dataProvide the ServiceContract
Payment dataProcess subscriptionsContract
Usage dataImprove the Service, analyticsLegitimate interest
ImagesDeliver AI generationContract
Technical dataSecurity, performanceLegitimate interest

4. Third parties

We share data with the following processors only to the extent necessary to deliver the Service.

ProcessorPurposeLocation
SupabaseDatabase & authenticationEU
StripePayment processingUS (SCCs)
fal.aiAI image generationUS (SCCs)
VercelFrontend hostingUS (SCCs)
ResendTransactional emailUS (SCCs)
PostHogProduct analyticsEU
CloudflareCDN & DNSUS (SCCs)

We do not sell your data. We do not use your data for advertising.

5. Image data

Images you upload are processed by fal.ai to generate outputs. They are not stored permanently on fal.ai servers after processing and are not used to train AI models.

6. Retention

  • — Account data: retained while your account is active + 30 days after deletion
  • — Usage & analytics data: 24 months
  • — Payment records: 7 years (legal obligation)

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict processing, data portability, and object. Email hello@skalm.space — we will respond within 30 days.

You may also lodge a complaint with the Spanish data protection authority (AEPD): www.aepd.es

8. Cookies

See our Cookie Policy for details.

9. Changes

We will notify you of material changes by email or in-app notice.