Data protection & privacy: who can access your styles and images

This article summarizes how we handle your styles, training images and generated images. The full terms are in our Privacy Policy and Platform License Agreement. If anything here differs from them, they apply.

Who we are

exactly.ai is run by Durer AI Ltd, a company registered in England and Wales (company number 14462982). Durer AI Ltd is the data controller for your personal data.

Durer AI Ltd is registered with the Information Commissioner's Office (ICO), the UK data protection regulator. Registration reference: ZB920931. You can check the entry on the ICO register. The register lists organizations that pay the ICO's data protection fee. It is not a certification of how we handle data.

Who can access your styles and images

Your styles are under My styles, and the images you generate are in your projects and in History. Besides you, the following people and companies can access them.

People you share a style with

To share a style you own, choose Share on it in My styles and enter the email address of the other person's exactly.ai account. The style then appears under Shared with me in their account, and they can generate images with it. They also see its cover, which is one of its training images.

You can't remove a share yourself. To take someone's access away, use Contact us.

Your organization

If your account belongs to an organization:

• Styles we make available to your organization appear in the model picker under the organization's name, and every member can generate with them.

• A license anyone on your team takes, for example by downloading an image, belongs to the organization. Every member then sees that image or video without a watermark in History, under a tab named after your organization (Team licences on the phone), whoever generated it.

Our staff

Our team can access accounts, styles, training images and generated images to run the platform, including in the third-party IT and communication tools it works in: for example to help when you contact us, to review generations, to check that content follows our rules and the law, and to learn from how the platform is used so we can improve it. Staff with access to personal data are bound by confidentiality.

Service providers

We use third-party service providers for parts of the platform: hosting and storage, training and running styles, generating and editing images and videos, upscaling, vectorization, background removal, automated content checks, analytics and support. Your training images, prompts, reference images and generated images go to a provider when the feature you use needs it. For example, training images you upload are checked automatically against our content rules and described in text for training, and both steps run on an AI provider's systems.

Personal data such as your email address also goes to services for error monitoring, email delivery, payments, customer relationship management, ad measurement, and a sales agency that follows up on sign-ups. If you book an onboarding call, your name and email address also go to our scheduling service.

These providers are contractually required to protect the data and to comply with data protection law. We store your styles and images in the United States, and other data may be processed outside the UK and the EEA, by our providers or by our staff. For those transfers we rely on safeguards such as adequacy decisions and standard contractual clauses.

Section 5 of the Privacy Policy lists the other cases in which we may share personal data, for example when the law requires it.

Public styles and images

A style you train becomes public, as an Artist Style, only if you ask us to publish it. A published style's public page shows its cover, which is one of its training images unless we replace it, and may show some of its training images. Images generated with Artist Styles by accounts on a free plan can become public, as section 10 of the Platform License Agreement describes.

Training AI models

Apart from training the style you ask for, we don't use your training images or the images you generate to train AI models.

Security

We protect data with technical and organizational measures such as encryption and access controls. Section 8 of the Privacy Policy describes them.

Deleting styles and images

• A style you own: open its menu in My styles and choose Delete. It disappears from My styles, and nobody can generate with it any more, including the people you shared it with. Images already generated with it stay until you delete them.

• An image you generated: open its menu and choose Delete. It disappears from your projects and History, and, in an organization, from your colleagues' organization tab, even when the organization holds its license. Deleting an image doesn't remove its public page if it already has one.

• A video: videos can't be deleted in the app yet. To have one removed, use Contact us.

Deleting in the app removes an item from your account, but the item and its files stay in our systems. To ask us to delete your personal data, see Your rights below.

On a free plan, 93 days without generating, training or buying make your unpublished styles inactive: we delete their trained weights from our own storage and keep the training images, and a style needs retraining before you can use it again (section 17 of the Platform License Agreement).

Your rights

Data protection law (the GDPR, the UK Data Protection Act 2018 and, where it applies, the California Consumer Privacy Act) lets you ask us to:

• give you a copy of the personal data we hold about you

• correct it

• delete it

• restrict or object to how we use it

• transfer it to another party

Some of these rights apply only in certain circumstances. Sections 10 to 12 of the Privacy Policy explain when. To make a request, email support@exactly.ai.

You can also complain to a data protection authority: in the UK, the Information Commissioner's Office; in the EU, the authority in the country where you live.