Privacy Policy

Effective August 7, 2026

What we collect

We collect information needed to provide the service: account and login email, character prompts and generated text, usage and credit records, subscription status, support messages, and limited technical information used for security and fraud prevention.

AI-assisted generation

Character-card text currently uses DeepSeek V4 Flash. Before portrait generation, the portrait text prompt is checked by CharacterMuse rules and Waffo Prompt Sift. Portrait generation then uses Doubao Seedream 5.0 Lite. The image provider applies built-in input and output safety controls, and CharacterMuse checks the returned file before display.

CharacterMuse is an AI-assisted character-card workspace. Text submitted for generation is sent to an AI service provider to produce character-card content. AI output may be inaccurate or resemble existing material and must be reviewed by the user. Do not submit passwords, payment details, confidential information, or sensitive personal data.

Portrait uploads, crop operations, card parsing, and PNG embedding are handled in your browser where the page states they are local. Uploaded portrait files are not sent to an image-generation provider.

Where AI Portrait is shown as enabled and you explicitly use it, CharacterMuse sends only the portrait text prompt—including relevant visual details derived from the character card—to our image-generation provider, Volcano Engine, to create the requested portrait. CharacterMuse relays the generated image to your browser for local use and does not provide a cloud image library. We retain limited job and usage metadata for quota enforcement, security, and troubleshooting; we do not store the portrait prompt or generated image in the CharacterMuse database.

For moderation, we retain limited metadata such as the review stage, result, reason category, provider request ID, and time. We do not store the raw portrait prompt or generated image in the moderation log. Waffo documents Prompt Sift as a stateless prompt check.

Accounts, credits, and security

We use account, device, network, and generation records to enforce plan limits, prevent repeated free-credit claims, investigate abuse, and protect the service. Automated signals may delay or block suspicious requests. Contact support if you believe a restriction is incorrect.

Payments

Payment details are processed by the payment option shown at checkout, such as PayPal or Waffo Pancake. CharacterMuse does not receive or store full card numbers. We retain order references, subscription status, billing period, entitlement, webhook, refund, and dispute records as needed to provide paid access and meet legal obligations.

Analytics and cookies

Necessary storage supports sessions, security, and preferences. With consent where required, analytics help us understand page views, referrers, generator events, downloads, and pricing interest. See the Cookie Policy.

When you allow analytics, CharacterMuse may keep an anonymous first- and last-touch referral record in your browser for up to 90 days and record selected funnel events, such as a successful generation or checkout start. We store campaign tags, the referring host, and the landing path—not the full referring URL or its query string. Verified payment events are recorded by our server so referral performance can be measured without relying on browser claims.

How long we keep data

We keep account, usage, payment, fraud-prevention, and support records only as long as reasonably needed to operate the service, satisfy accounting or legal duties, and resolve disputes. Character cards exported in the browser are not a cloud library unless a save feature explicitly says otherwise.

Your choices

You may request access, correction, or deletion of eligible personal data and unsubscribe from optional messages. Some payment, security, or compliance records may need to be retained. Requests are handled subject to applicable law.

Contact

For privacy requests, contact support [at] charactermuseai [dot] com from the email connected to your account when possible. Never send passwords, full card numbers, or identity documents by email.