Privacy Policy
How AI Flyer Gen collects, uses, stores and protects your personal data
Last updated: October 30, 2026
This Privacy Policy explains what personal data AI Flyer Gen collects, why we collect it, how we store and share it, and the choices you have. It applies to the website at aiflyergen.com and the AI flyer generator it provides (the "Service").
1. Who we are
AI Flyer Gen is an online AI flyer generator operated by DeepShift Inc., a Colorado corporation ("AI Flyer Gen", "we", "us"), 1942 Broadway Ste 314C, Boulder, CO 80302, USA. DeepShift Inc. is the data controller for the personal data described in this policy. You can reach us at support@aiflyergen.com or through the contact page.
2. What data we collect
Depending on how you use the Service, we collect:
Account data. When you sign up with email and password, we store your email address, a hashed version of your password, a display name if you set one, and the date your account was created. If you sign in with Google, we receive your name, email address and profile picture from Google. We never see your Google password.
What you give the generator.
- Prompts and flyer text: the description and exact wording you type, and the format and quality you choose.
- Logo and style reference images: images you upload are stored in your private storage so they can be sent with your flyer request.
- Brief documents: PDF, Word, TXT or Markdown files you upload to fill in the prompt. We convert the file to text, extract the key details and return them to your browser. We do not store the document itself. The extracted text is only saved if it becomes part of a flyer you generate.
- Generated flyers: the images produced for you, with the inputs and settings used, kept in your account history.
Payment data. When you buy a credit pack we record the pack, the amount, the currency, the date and a transaction reference. Card details are entered directly with our payment processor; AI Flyer Gen never receives or stores your card number.
Usage and technical data. Server logs that include your IP address, browser type, requested pages, timestamps and error messages. Brief reading is free, so we also keep a daily count of brief reads per IP address for about one day to prevent abuse.
Support and communications. Messages you send to the support email, through the contact page or through the support chat. If you subscribe to our newsletter, your email address and the date you subscribed.
Preferences. Your language and similar settings.
3. How we use your data
We use your data to:
- create and secure your account and let you sign in;
- read your brief documents, generate flyers from your inputs and show them in your history;
- give each new account its free first flyer and track your credit balance;
- process credit-pack purchases, issue refunds and keep accounting records;
- send transactional emails such as receipts, password resets and account notices;
- send the newsletter, only if you subscribed, with an unsubscribe link in every message;
- answer support requests;
- measure how the Service is used so we can improve it;
- detect and prevent abuse, fraud and violations of our Terms of Service;
- comply with legal obligations.
We do not use your prompts, documents, uploaded images or generated flyers to train AI models. We do not sell your personal data, and we do not use it for third-party advertising.
4. AI processing and model providers
AI Flyer Gen does not run the AI models itself. We use these third-party services, and send them only what each step needs, never your name, email address or payment details:
- Flyer images: your prompt, flyer text, settings and any logo or style reference images are sent to OpenAI GPT Image 2.5 through kie.ai. Uploaded images are passed to kie.ai as temporary files, which kie.ai deletes after about 24 hours. kie.ai keeps generated images for up to 14 days before deleting them.
- Brief reading: the text of a brief document is sent to DeepSeek through kie.ai to pick out the headline, dates, place and contact details. PDF and Word files are first converted to text with Cloudflare Workers AI.
Generated images are copied to our own storage (Cloudflare R2) and shown in your account history. Flyers you move to the trash are permanently deleted after 30 days. We may add or switch providers in the future and will update this policy when we do.
5. Who we share data with
We share personal data only with service providers that help us run AI Flyer Gen, and only to the extent needed for their role:
- Cloudflare hosts the application (Workers), stores account and generation records (D1), stores generated images and uploads (R2), caches data (KV), converts documents (Workers AI) and serves optimized images.
- kie.ai and the model providers it gives access to (OpenAI, DeepSeek), as described in section 4.
- Stripe or another PCI-compliant payment processor handles payments.
- Resend delivers transactional email; Resend, Beehiiv or MailCheap may deliver the newsletter if you subscribed.
- Google provides "Sign in with Google" if you choose it.
- Crisp provides the support chat.
- Analytics providers, as described in section 6.
We may also disclose data if required by law, to protect the rights and safety of users or the public, or as part of a merger or acquisition, in which case we will tell you first.
6. Cookies and analytics
We use strictly necessary cookies to keep you signed in and remember your language. We use cookieless analytics (Plausible, Umami) to understand how the Service is used, and Google Analytics and Microsoft Clarity only if you accept them in the cookie banner. You can change that choice at any time with the Cookie settings link in the footer. We do not use advertising cookies. Details of each cookie and how to control them are in our Cookie Policy.
7. How long we keep data
- Account data: for as long as your account exists. When you delete your account from settings, your profile data, uploads and generated images are removed within 30 days.
- Generated flyers: until you delete them. Trashed items are purged after 30 days.
- Logo and style reference uploads: until you delete them or your account.
- Brief documents: not stored. The extracted text is kept only as part of flyers you generate.
- Brief-read counts by IP address: about one day.
- Payment records: as long as tax and accounting law requires, even after you delete your account. They contain no card numbers.
- Server logs: the short period needed for security monitoring and debugging.
- Support messages: as long as needed to resolve your request and keep a record of it.
- Newsletter data: until you unsubscribe.
8. Your rights
Depending on where you live (for example under the GDPR in the EEA and UK, or the CCPA in California), you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data (you can delete flyers and your account yourself in settings);
- receive a copy of your data in a portable format;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent, such as the newsletter or analytics cookies;
- not be discriminated against for exercising these rights.
To exercise any of these rights, email support@aiflyergen.com from the address linked to your account. We will respond within the time required by law. We do not sell or "share" personal data for cross-context behavioral advertising as those terms are defined by the CCPA. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.
9. Children
AI Flyer Gen is not intended for children. You must be at least 13 years old to use the Service, or at least 16 if you live in the EEA or the UK. If you are under 18, you need a parent's or guardian's permission. If we learn that we have collected data from a child below the minimum age, we will delete it.
10. Security
We protect your data with industry-standard measures: encrypted connections (HTTPS), hashed passwords, private storage for uploads and generated images, access controls on our infrastructure and limited staff access. Payment details are handled entirely by our payment processor. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access.
11. International transfers
Our infrastructure and service providers operate globally, so your data may be processed in countries other than your own, including the United States. Where required, we rely on safeguards such as standard contractual clauses to protect transferred data.
12. Changes to this policy
We may update this policy as the Service changes. We will post the new version here and update the "Last updated" date. For significant changes we will notify you by email or with a notice on the site before they take effect.
13. Contact
Questions, requests or complaints about privacy: email support@aiflyergen.com or use the contact page.
Postal address: DeepShift Inc., 1942 Broadway Ste 314C, Boulder, CO 80302, USA