Privacy Policy

Nano Banana 2.1 ("we," "us," or "our") is operated by an individual sole trader and is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use Nano Banana 2.1 (available at nanobanana-21.cc, the "Service"), and the rights available to you.

Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update it from time to time as described in Section 13.

1. Data Controller

The data controller for this Service is:

Business: Nano Banana 2.1, operated by an individual sole trader
Privacy Email: support@nanobanana-21.cc
Data Protection Officer (DPO): Not applicable

2. Personal Information We Collect

2.1 Information You Provide Directly

Account Info: name, email address, and password (stored hashed, never in plain text) when you register with email.
Content You Submit: text prompts, reference images you upload, and generation settings ("Input"), and the images produced from them ("Output").
Payment Info: your plan, purchase and invoice records, and payment status. Full card numbers are never stored by us; card data is handled by our payment processor (see Section 5).
Communications: emails, support requests, and feedback you send us.

2.2 Information We Collect Automatically

Device & Network: IP address, device type, operating system, browser type, time zone.
Usage Data: pages visited, feature usage, and generation history (such as when you generated and how many credits were used).
Log Data: request timestamps, error logs, and performance metrics.

If you sign in with Google, we receive basic profile information (such as your name and email address) from Google as part of that login.

3. How We Use Your Information

Purpose	Legal Basis
Service delivery and maintenance (including generating your images and storing your results)	Contract performance
Billing, credits, and payment processing	Contract performance
Free-allowance and credit accounting, abuse and fraud prevention	Legitimate interests
Customer support	Contract / Legitimate interests
Service notifications (account verification, password reset, billing, policy changes)	Contract / Legitimate interests
Security and service integrity	Legitimate interests
Product analytics and improvement	Legitimate interests
Legal compliance	Legal obligation

We may aggregate or anonymize data for statistical purposes. Such data cannot be linked to any individual.

4. Cookies & Tracking Technologies

We use strictly necessary cookies to keep you signed in and to operate core features of the Service. We also use third-party analytics tools to understand how visitors use the Service and to improve it. We do not use third-party advertising cookies.

For full details on the cookies we use and how to manage them, see our Cookie Policy.

We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share your information only in the following circumstances:

Service Providers: we use third-party providers for hosting and file storage, AI image generation, payment processing, transactional email, and analytics. They process data only to provide their services to us. Payment card data is processed exclusively by our payment processor and is not stored on our servers. Your prompts and any reference images you upload are sent to our third-party AI model provider solely to generate your Output.
Legal Requirements: where required by law, court order, or a lawful regulatory request.
Business Transactions: in a merger, acquisition, or similar event, with notice and continued protections.
With Your Consent: for any other purpose, with your explicit prior consent.

6. Data Security

Encryption in transit: TLS / HTTPS.
Secure storage: passwords are hashed, and sensitive data is protected.
Access controls: least-privilege principle, and access to your generated images is limited to your signed-in account.
Our infrastructure, including our database, file storage, and application hosting, runs on a major cloud platform.

If a security incident affects your rights, we will notify you and the relevant authorities as required by applicable law. Please keep your credentials secure and do not share them.

7. Data Retention

Data Type	Retention Period	Upon Expiry
Account information, prompts, and generation records	While your account is active; removed when you delete your account	Delete
Generated images and uploaded reference images	While your account is active, until you delete them from your dashboard, or until you ask us to delete them	Delete
Transaction / billing records	As long as needed to meet tax and accounting obligations	Delete or archive
Support communications	As long as needed to resolve your request	Secure deletion
Security and server logs	A limited period needed for security and troubleshooting	Secure deletion

You can delete your account from your account settings. Deleting your account removes your account, prompts, and generation records. If you want stored image files removed as well, email us and we will delete them. Records we must keep by law (such as billing records) are retained as described above.

You can also delete individual images from your dashboard. This permanently removes the image file and its prompt. We keep a minimal record of that generation (model, settings, status, credits used and time) so that billing and the free allowance stay accurate; it is removed when you delete your account.

8. Your Data Rights

To exercise any right below, contact us at support@nanobanana-21.cc; we respond within 30 calendar days.

Right	Description
Right to be informed	Know what data we collect and how we use it
Right of access	Obtain a copy of your personal information
Right to rectification	Correct inaccurate or incomplete data
Right to erasure	Request deletion under certain conditions
Right to restrict processing	Temporarily suspend processing in certain cases
Right to data portability	Receive your data in a machine-readable format
Right to object	Object to processing based on legitimate interests
Right to withdraw consent	Withdraw consent for consent-based processing

You may also lodge a complaint with your local data protection authority.

9. Emails

We send service emails, such as account verification, password reset, and billing notices. We do not currently send marketing emails. If we introduce them, we will do so only with your consent and you will be able to opt out at any time; opting out will not stop essential service notifications.

10. International Data Transfers

Our infrastructure is provided by a provider with a global network, and some of our service providers, including our AI model provider and payment processor, may process data in other countries, including the United States. Where we transfer personal information internationally, we take reasonable steps to ensure it receives an appropriate level of protection consistent with this Policy.

Privacy & Support Email: support@nanobanana-21.cc
Business: Nano Banana 2.1 (nanobanana-21.cc)

This is our single contact channel for general support, billing, and privacy-related requests.

This Privacy Policy is for general reference only and does not constitute legal advice.

Key points