Privacy Policy

1. Who we are

The Service is operated by Mabyduck Ltd, a company registered in England and Wales (company number 15813922), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For any privacy questions or requests, contact us at privacy@mabyduck.com.

2. Data we collect

We collect the following categories of data when you use the Service:

• Submissions. The prompts you enter, any reference images you upload, your eval settings, the images generated from them, and the ratings and results produced during evaluation.
• Contact data. An email address you provide, for example to send you a receipt or a link to find your evals.
• Payment data. When you pay for an eval, payment is handled by our processor, Stripe. We receive confirmation and limited transaction details but do not store full card numbers.
• Technical and usage data. Information such as your IP address and basic request information, which we use to operate the Service and apply rate limits.
• Cookies. A cookie that remembers the evals you have created on your device so they appear under “My evals”. The Service uses no accounts and works without you signing in.

3. How we use data

We use your personal data — your email address, payment details and technical data — only to provide and operate the Service: running evals, processing payments, showing you your results, securing the Service, and meeting our legal obligations. We do not sell your personal data.

We treat your Submissions and the content generated through the Service — the prompts, reference images, generated images, and ratings — differently. As described in our Terms of Service, you grant us a broad licence to this content, and we may store, analyse, publish, sell, and otherwise use it, including to research, train and evaluate models and to build and sell datasets and other products. Evals and their results may be made publicly available through the Service. Please do not submit anything you would not want stored, analysed, shared, sold or made public, and do not submit other people’s personal data or images of identifiable people without their consent.

4. How we share data

We share data with service providers and partners who help us operate the Service, including:

• Image-generation providers (such as OpenRouter and fal.ai), which receive your prompts and reference images in order to generate images;
• The Mabyduck rating platform and rater pools, which display generated images to human or AI raters who provide ratings;
• Cloud and infrastructure providers used to host the Service and store images and files;
• Stripe, our payment processor;
• Error and monitoring tools (such as Sentry) that help us keep the Service running reliably.

Because you grant us a broad licence to your Submissions and the content generated through the Service (prompts, reference images, generated images and ratings), that content may be shared with or sold to third parties, for example as part of a dataset. This does not include your personal data — we do not sell your email, payment details or other personal data.

We may also share or transfer data where required to comply with the law or to protect our rights, or as part of a sale, merger or other business transaction.

5. How long we keep data

Generated images and their inputs are retained for a limited period — currently around five years after creation — after which they may be deleted automatically from our image storage. Eval records, results and the data we incorporate into our own datasets and products may be kept indefinitely. We keep contact and transaction data for as long as needed to operate the Service and meet our legal and accounting obligations.

6. Where data is stored

Data is stored on servers operated by our cloud providers, which may be located in the UK, the European Economic Area, or elsewhere. Where personal data is transferred outside the UK or European Economic Area, we rely on an appropriate safeguard for that transfer, such as an adequacy decision or standard contractual clauses. We take reasonable technical and organisational measures to protect data against unauthorised access, loss or misuse.

7. Your rights

Depending on where you live, you may have rights over your personal data, including the right to request access to it, to ask us to correct or delete it, to object to or restrict certain uses, to data portability, and to withdraw any consent you have given. To make a request, contact us at privacy@mabyduck.com.

If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (the ICO) at ico.org.uk. If you are in the European Economic Area, you may complain to your local data protection authority.

These rights apply to your personal data. As set out in our Terms of Service, the prompts, images and ratings you submit are licensed to us as content, and some of it may already have been aggregated, anonymised, sold or incorporated into datasets and products, so we may not always be able to remove content that has been used in this way.

8. Changes to this policy

We may update this Privacy Policy from time to time. The version published on this page is the version that applies, and we will update the date at the top when we make changes.