Who handles your data

Account and infrastructure

Clerk handles sign-in, email, account identifiers and sessions. Convex hosts the database and online functions, including accounts, credits, financial records and requests you submit.

Cloudflare hosts the website and private R2 storage for temporary generation files, results, voices, cloud projects and billing documents. The website host sees your IP when a page loads; that does not upload local files.

Clerk and Convex have US operations; Cloudflare uses international infrastructure. A service location or headquarters does not guarantee exclusive data residency. See their notices and subprocessors and ask for the configuration applicable to your use before sending data with location restrictions.

Service notices: https://clerk.com/legal/privacy · https://www.convex.dev/legal/privacy · https://www.cloudflare.com/privacypolicy/.

Billing, email and waitlist

Stripe processes payments and receives card details directly, together with billing and transaction information. Resend delivers transactional email and receives the recipient, message and delivery status. These services have US operations and may process data in other countries.

The app calls country.is to suggest a billing country. It receives the connecting IP, not your prompts, files or card details. You can correct the suggested country. The waitlist uses Google Forms and receives the email you enter and ordinary connection metadata; it does not require a Google account.

Notices and information: https://stripe.com/privacy · https://resend.com/legal/privacy-policy · https://policies.google.com/privacy · https://country.is/.

Generations and voices

Integrated generation services are fal, Higgsfield and Tripo. Routing depends on the model and availability. The selected service receives the prompt, settings, necessary files and technical identifiers. For voice creation, fal receives the sample and its transcript; speech in that voice uses its voice file and the text to speak.

We ask fal not to keep JSON inputs and outputs in request history. We request seven-day expiration for generated files and one-day expiration for the file made during voice cloning. These control request history and files; they do not guarantee no operational logs, model-maker processing or training. Higgsfield and Tripo have their own API retention periods and conditions.

Nodelizer’s no-training commitment is our own. It is not a guarantee about every supplier: training, retention, security review and service improvement are separate matters. Applicable API or contract terms can differ from a supplier’s consumer website terms. Ask for the model and contract details before submitting confidential work that requires additional assurances.

Policies and controls: https://fal.ai/legal/privacy-policy · https://fal.ai/legal/terms-of-service · https://fal.ai/docs/documentation/model-apis/media-expiration · https://higgsfield.ai/privacy-policy · https://higgsfield.ai/terms-of-use-agreement · https://www.tripo3d.ai/privacy · https://www.tripo3d.ai/terms.

Commercial use and model rules

Nodelizer permits commercial and client use of results you can lawfully use. The selected model’s safety rules, licenses and restrictions also apply, including when a hosting intermediary runs it. A credit price does not guarantee copyright, exclusivity or clearance of third-party rights. Ask for the model’s conditions before using results for work with special requirements.

Model families and prices appear on the pricing page and in the app’s model picker. To obtain the applicable conditions and recipient for a particular generation, email support@nodelizer.com with the model and job reference; do not send unnecessary sensitive data.

Retention, transfers and requests

The Privacy Policy’s retention windows describe copies under our control. Supplier logs, backups and mandatory records have separate treatment. Deletion in Nodelizer alone does not demonstrate erasure from every third-party system.

AI services and their subprocessors may process data in several countries; we do not promise exclusive EU or Brazilian residency. Email support@nodelizer.com for the recipients, locations, retention and applicable transfer-safeguard information for your use. A technical setting does not replace a data-protection agreement.

For client work, contact us first if you need a data-processing agreement. We must confirm applicable roles and instructions; this page does not itself create a DPA. We do not use customer content for training or advertising. Our own account, billing, security and legal purposes are described separately in the Privacy Policy.