Privacy & Cookies Policy

This policy covers the personal information Echo AI collects when you visit echoai.me, create an account, or use our photo tools — and the choices you have over it.

Who we are

Echo AI operates the website at echoai.me and the tools on it. When this policy says "we" or "us," that's who we mean. Questions about anything below can go to privacy@echoai.me.

What we collect

• Account details: when you sign up, we handle your email, name, and login directly, including any optional Google or GitHub sign-in you pick. We store the basic profile tied to your account, and your password is stored using industry-standard hashing — we never see it in plain text.
• Images and generations: the photos you upload and the results you create, so we can process them and show them back to you.
• Usage and device data: the pages you open and actions you take, plus standard technical details your browser sends — IP address, device and browser type, approximate location from that IP, and timestamps.
• Payment information: if you buy something, our payment processor collects and handles your card details. We don't see or store full card numbers; we keep a record of the purchase itself.
• Messages: anything you send us by email or through a form.

How we use it

• To run the tools you ask for and deliver the results.
• To create and secure your account, and to prevent fraud and abuse.
• To see what's working and improve the product.
• To reply to you and send account or service messages.
• To meet legal obligations and enforce our terms.

We don't sell your personal information. If we ever want to use your uploaded images to improve our models, we'll ask first.

AI image processing and temporary links

When you use an AI photo tool, Echo AI sends your prompt and any uploaded images to Fal.ai for processing. Echo AI does not add those images to its own database or object store. Fal.ai temporarily hosts inputs and generated results; our current configuration requests a lifetime of about two hours. Fal CDN media URLs are temporary but can be opened by anyone who obtains the link, so do not share them. We track each generation task in your account on our server, but the current interface does not resume an in-flight generation after you reload the page; if a generation fails, the credits it used are refunded to your account automatically.

Cookies and analytics

Echo AI uses cookies and similar storage to keep you signed in, hold your session together securely, remember preferences, and measure how the site is used. For measurement we use Google Analytics, which sets its own cookies and receives usage data such as the pages you view. You can clear or block cookies in your browser settings — the ones needed for login aren't used for tracking. If you'd rather Google Analytics not count your visits, Google offers a browser opt-out add-on.

Who we share it with

We share data with the providers that make Echo AI work — for example Fal.ai for AI image processing and temporary media hosting, our website host, our payment processor, and Google Analytics — and only for what they do on our behalf. We may disclose information when the law requires it, to protect people or investigate abuse, or as part of a merger, sale, or similar business change (you'll be told if that happens). We don't sell your data to advertisers.

How long we keep it

We keep account information for as long as your account is open. Echo AI does not retain uploaded or generated images in its own database or object store in this beta. Fal.ai temporarily retains AI inputs and results under the configured lifecycle, currently about two hours. Provider operations and deletion timing remain subject to Fal.ai's infrastructure. Deleting your account closes the account itself — see your rights below.

Your choices and rights

Depending on where you live, you can ask to see the personal data we hold, correct it, delete it, or get a copy. You can also opt out of non-essential email using the unsubscribe link or by writing to us. To make a request, email privacy@echoai.me from the address on your account; we'll confirm it's you and respond within a reasonable time.

Security

We protect your information with encryption in transit, access controls, and reputable infrastructure providers. No system is completely secure, so we can't promise perfect protection — but we work to keep the risk low and to respond quickly if something goes wrong.

International transfers

Echo AI and its providers may process your information in countries other than your own, including the United States. Where we do, we rely on appropriate safeguards so your data keeps a comparable level of protection.

Children

Echo AI isn't meant for children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has given us information, contact us and we'll remove it.

Changes

We'll revise this policy when our practices or the law change, and update the date at the top. When a change is significant, we'll make a clearer effort to let you know.

Contact

Questions or requests: privacy@echoai.me.