Updated 29 September 2026

Privacy Policy

Puni, from Creative Intelligence, keeps the information it needs to save your work, run the studio, and understand where the product needs care.

What we collect and why

We store account details such as your email, account identifier, and chosen profile; the scenes, checkpoints, uploads, assets, sculpts, and renders you create; and the permissions you grant to devices, agents, and share links. We use these to authenticate you, save and recover work, and deliver the features you request.

We store provider keys encrypted so Puni can make generation requests on your behalf. We also keep transaction and credit records, technical logs, and usage information such as pages visited, features used, browser and device information, and errors. These help us process payments, prevent abuse, diagnose failures, and improve Puni.

Who helps run Puni

• Clerk handles authentication and sign-in account details.
• Convex stores database records and files and runs backend functions.
• Vercel hosts the web app. Vercel Web Analytics measures visits when enabled.
• OpenAI and fal process the prompts, reference images, and other inputs needed for generation on your own provider keys.
• Stripe processes payments and maintains payment records.
• Modal runs hosted rendering and processes the scene data needed to draw your output.
• PostHog measures product use when configured, so we can understand feature use and reliability.

These services process information under their own terms and privacy practices, and may process it in countries other than yours. We send the information needed for the relevant feature. Authentication uses cookies or similar storage. Configured product analytics may also use browser storage. We do not sell your artwork or account information.

What sharing makes public

A live share link makes its saved snapshot available to anyone who has the link. Your chosen public profile may list your shared work. Enabling reuse lets another person keep a copy. Revocation prevents future access through that link, but does not recall copies already downloaded or saved by others.

Retention and account deletion

We retain saved content while your account is active. Temporary transfers and job records may expire sooner under the feature’s lifecycle. Requesting account deletion immediately revokes access tokens, connected devices, OAuth and MCP connections, share links, and stored provider keys.

Your scenes, checkpoints, assets, uploads, sculpts, renders, profile, and remaining credit balance are kept for a 30-day recovery window. Sign back in during that window and your account is restored automatically. If you sign in with a new account instead, and its verified email address matches the deleted account’s verified email, your scenes and your remaining credit balance move to the new account within the same window. Either way, share links, access tokens, connections, and provider keys stay revoked; create new ones. After the window ends, scheduled batches erase your content and delete your Clerk sign-in account. A minimal deletion record remains to prevent replay and record completion.

Another person’s independent copy is their content. Payment and credit records may remain where needed for accounting, disputes, or legal obligations. Security logs, backups, and processor-held records may have separate retention periods.

Your choices and contact

You can export work, revoke connections and sharing, remove provider keys, and request account deletion in Settings. Depending on where you live, you may also have rights to access, correct, delete, or restrict use of your personal information.

For privacy questions or requests, contact hello@puni.design. We will update the date and explain material changes when this policy changes.