Privacy Policy

Last updated: September 28, 2026

Scope and contact

This policy explains how Seedream 5.0 Pro at seedream-5pro.com processes information when you browse, sign in, generate images, purchase credits or subscriptions, or contact support. This is an independently operated application, not an official ByteDance website.

For privacy questions or requests, email support@seedream-5pro.com. Read this policy with our Terms of Service, Acceptable Use Policy, Refund Policy, and Cookie Policy.

Information we process and why

• Account and sign-in information. Google sign-in supplies information such as your name, email address, profile image, and provider account identifier. We store account identifiers, email verification status, linked-provider credentials or tokens needed for authentication, session records, and account status. Session records can include IP addresses and browser/user-agent information. This supports sign-in, account security, and support. We do not receive your Google password.
• Prompts, reference images, and results. We process the text, uploaded reference images, and generation settings you submit to produce images and check content safety. Upload records include the original filename, file type, size, storage key, account association, and timestamps. Generation history includes prompts, references, model and settings, result locations, task identifiers, status, credit use, errors, and timing information. We also store your saved favorites. Uploading a reference image stores it before you submit a generation; abandoning or rejecting a generation does not automatically delete the upload.
• Payments and credits. We process your account identifier, name and email, selected plan or credit package, payment-provider identifiers, checkout and invoice references, subscription status and billing periods, and credit transactions. These records support payment fulfillment, account balances, refunds, billing questions, and disputes. Stripe collects payment details through its checkout; our application does not store full payment-card numbers.
• Safety and operational records. We process moderation decisions, flagged categories or scores, account restrictions, and violation strikes to enforce our content rules and prevent abuse. We use Cloudflare-provided IP and country information to assess promotional-credit eligibility. The promotional abuse-control records store an IP hash, account identifier, and timestamp; hashing does not make these records anonymous, and session or infrastructure records may separately contain the IP address. We also record operational outcomes such as trial-credit decisions, generation blocks or unavailable checks, and checkout outcomes, with account identifiers, reasons, and limited model or purchase metadata. These server-side records are separate from optional browser analytics.
• Support communications. We process the email address, message, attachments, and relevant account or transaction information you choose to send us to answer requests and investigate problems. Do not send passwords, full card numbers, or unnecessary sensitive documents.
• Optional website analytics. Only after you opt in, Google Analytics measures visits and interactions and Microsoft Clarity provides interaction analytics and session replay on public pages. These services can process cookie or browser identifiers, page and referrer information, device/browser information, network information, and interactions such as clicks and scrolling. We do not load these optional trackers on authentication, generation, history/creations, favorites, dashboard, settings, or administration pages.

Service providers and other disclosures

We share information needed for the relevant service with these providers:

• Cloudflare: website hosting, request delivery and security, D1 database storage, R2 file storage, generation workflows, and transactional email delivery. Cloudflare Workers AI may also process content for safety checks.
• KIE and the model providers serving your selected model: prompts, reference images, generation settings, and task information needed to generate results.
• OpenAI: prompts and images for moderation, including generated-image URLs for output checks.
• Google Gemini, through OpenRouter or a directly configured Google API connection: prompts and reference images for semantic safety classification.
• Google sign-in: authentication and the associated account information.
• Stripe: checkout, billing, subscriptions, transaction reconciliation, and payment disputes.
• Google Analytics and Microsoft Clarity: optional public-page analytics and session replay, only with your opt-in.

These providers may process information in countries other than your own and under their own applicable terms and privacy policies. We do not promise that every AI provider offers zero retention or excludes all submitted data from training. Do not submit confidential material, sensitive personal information, or another person's images unless you have the necessary rights and are comfortable with this processing.

Authorized operators may access relevant account, generation, file, payment, and safety records to provide support, investigate failures, and enforce our policies. We may preserve or disclose relevant information when required by applicable law or valid legal process, or when necessary to investigate fraud, protect people, resolve disputes, or enforce our rules. We do not describe optional analytics as necessary to generate images or use a paid account.

Visibility of images and public content

Your generation history is account-scoped, and new reference uploads and generated files are marked non-public. Generating an image does not automatically add it to the public prompt gallery; the gallery is a separate collection of published examples and source attributions. Profile avatars and published gallery assets are public.

Non-public does not mean every image URL is secret or access-controlled. Our file-serving endpoint checks ownership or administrator access for private files, but generation providers can return temporary external result URLs. Direct provider or public-storage/CDN links may be accessible to anyone who has the link, independently of the account checks on our endpoint. Sharing a link or downloaded image can allow others to keep and redistribute copies. Do not treat image links as confidential storage.

Retention and what deletion does

We keep information to provide your account and history, fulfill payments, handle support and disputes, maintain safety controls, and meet applicable obligations. There is no single automatic deletion period for all records.

• Deleting a creation from history is a soft delete. It hides the creation from your ordinary history view; it does not immediately erase the underlying generation record, uploaded references, or stored output.
• Deleting a file through a file-delete control removes its stored object and file metadata. It is different from deleting a history entry and does not erase every related generation, audit, provider, or previously downloaded copy.
• Deleting your account in Settings removes the account and linked database records covered by account deletion. It is not an automatic purge of all R2 objects, external provider data, or every log. Promotional IP-hash records and moderation-strike records are stored separately and can survive account deletion.
• Withdrawing analytics consent stops future optional collection on this site. It does not erase information already received by Google, Microsoft, or other parties.

Provider retention, public caches, copies others have saved, and records needed for lawful obligations or dispute resolution can differ from the data visible in your account. Contact us if you need deletion beyond the available controls, including retained image objects; identify the account and relevant items without sending unnecessary sensitive information.

Your choices and rights

You can manage available profile settings, delete visible history items, request account deletion through Settings, and change optional analytics consent using Cookie preferences in the footer. Declining analytics does not prevent you from signing in, generating images, or purchasing the service.

Depending on the law that applies to you, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to certain processing, withdraw consent, or complain to a competent data-protection authority. Email support@seedream-5pro.com to make a request. We may need to verify account ownership, and some records may need to be retained for lawful reasons; we will explain relevant limitations.

Where applicable law requires a legal basis, we process information as needed to provide the service you request, for legitimate operational and safety interests, to satisfy legal obligations, or with consent for optional analytics. The applicable basis depends on the purpose and local law; using the website alone is not consent to optional tracking.

Security and adult eligibility

We use account access controls and other technical measures, but no storage or transmission method is completely secure. Content moderation also has limitations and does not guarantee that every result is safe.

The service is for adults aged 18 or older who also meet the age of majority where they live, as set out in our Terms. It is not intended for children. If you believe a child has provided personal information, or someone has uploaded your image without authorization, contact support so we can investigate.

Policy changes

We will publish changes on this page and update the date above. Material changes may also be communicated through the website or account contact details. New optional processing that requires consent will not be treated as accepted merely because you continue browsing.