Privacy Policy
Last updated: 22 April 2026
Mantra Technology is committed to protecting your personal data. This Privacy Policy explains what we collect, why we process it, how long we keep it, and the rights available to you under the EU General Data Protection Regulation ("GDPR").
1. Data Controller
The data controller is Mantra Technology, located at 75 rue de Courcelles, 75008 Paris, France, registered under SIREN 918 472 061.
Contact for privacy matters: privacy@mantratechnologie.com.
2. Data We Collect
- Account data. Email address (required for authentication), language preference.
- Content data. The text of prompts you submit, images generated from those prompts, and any metadata attached to them (aspect ratio, preset, timestamp).
- Billing data. Subscription status, invoice history, and payment metadata retained by our billing processor (Mollie). We do not store your payment card details on our servers.
- Security logs. IP address, user agent, authentication events, and moderation events, collected for abuse prevention and service integrity.
- Cookies. See our Cookie Policy (
/cookies).
We do not collect sensitive data (as defined by GDPR Article 9) and we do not profile users for advertising purposes.
3. Purposes and Legal Basis
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Creating and operating your account, processing generations, billing | Art. 6(1)(b) — performance of a contract |
| Abuse prevention, security, moderation of prompts and outputs | Art. 6(1)(f) — legitimate interest |
| Complying with tax and accounting obligations | Art. 6(1)(c) — legal obligation |
| Sending transactional emails (magic-link, billing receipts) | Art. 6(1)(b) — performance of a contract |
4. Sub-processors
We rely on the following sub-processors to provide the Service:
- Amazon Web Services (AWS) S3 — private object storage (EU region).
- Mollie B.V. — subscription billing and card processing (Netherlands; EU).
- Resend — transactional email delivery.
- Image generation provider — the AI model used to generate your images, operating under a data-processing agreement with Mantra Technology.
- Hosting provider — application hosting (EU region where available).
A detailed list, with up-to-date entities and jurisdictions, is available on request at privacy@mantratechnologie.com.
5. Data Retention
- Account data: retained while the account is active and for 30 days after deletion to allow for backup rotation.
- Generations: retained while the account is active; removed with the account.
- Moderation events (blocked prompts, SFW filter hits): retained 12 months.
- Billing records: retained 10 years as required by French tax law.
- Security logs: retained 6 months.
6. Your Rights (GDPR)
You have the following rights, which you can exercise at any time:
- Access — obtain a copy of the personal data we hold about you. Self-service via
/account → Export data. - Rectification — correct inaccurate data.
- Erasure — delete your account and associated data. Self-service via
/account → Delete account. - Portability — receive your data in a machine-readable format (JSON export).
- Restriction and objection — limit or object to processing based on legitimate interest.
- Withdraw consent — where processing is based on your consent.
We will respond to any request within 30 days. Contact: privacy@mantratechnologie.com.
7. International Transfers
Some sub-processors may process data outside the European Economic Area. Where this occurs, we rely on Standard Contractual Clauses adopted by the European Commission and, where appropriate, supplementary measures.
8. Automated Decision-Making
We do not take decisions that produce legal effects on you based solely on automated processing. The SFW filter that may reject a prompt is an automated moderation step that does not have legal effect; you may rephrase and resubmit at any time.
9. Cookies
See our Cookie Policy at /cookies.
10. Children
The Service is not directed to children under 16 years of age. If you believe a child has created an account, contact us at privacy@mantratechnologie.com.
11. Contact and Data Protection
For all privacy-related questions, requests, or complaints:
- Email:
privacy@mantratechnologie.com - Postal: 75 rue de Courcelles, 75008 Paris, France
12. Complaints
You have the right to lodge a complaint with the French data-protection authority (CNIL — https://www.cnil.fr/) or with the supervisory authority in your country of residence.