Privacy Policy

1. Who is responsible for your data

Donatello operates the service at donatello.studio. Privacy requests can be sent to privacy@donatello.studio.

2. Information we collect

When you use Google to create or access an account, we receive:

• your Google account's stable user identifier, email address and email-verification status;
• your display name and profile picture, when available; and
• the technical information required to create and protect your Donatello session.
• a short-lived consent receipt recording that you actively accepted the current Terms and Privacy Policy before sign-in.
• when you use Donatello Agent, the identifier, version and cryptographic hash of the licence you accepted, the acceptance time, Agent version and associated authenticated device session.

We do not request access to Gmail, Google Drive, your contacts or your Google password. Prompts, uploaded inputs, generated outputs and related settings are processed when you request a generation.

To measure authenticated service use, Donatello records the internal account ID and Madrid calendar date on which an active session uses the service. This daily activity record does not contain page content, prompts or generated media.

If you use a paid feature, Dodo Payments creates or associates a payment customer and processes checkout as merchant of record. Donatello stores Dodo customer, checkout, payment, refund and subscription identifiers; purchase amounts and currency; limited payment-method details such as card network, expiry and last four digits; invoice and payment status; and automatic-refill preferences and order status. Donatello does not receive or store your full card number or card security code.

If you choose to open optional surveys, Donatello creates a stable survey-specific identifier that is separate from your Google identifier and internal Donatello account ID. We process survey event identifiers, completion or reversal status and the resulting credit movement. For aggregate availability reporting, Donatello derives an approximate two-letter country locally from the request IP and stores only that country code; it does not retain the clear IP in survey telemetry. Donatello does not send your Google email address or display name through this integration.

You may separately choose to create an optional survey profile containing your date of birth, gender choice, two-letter country code and postal code. You may also choose to add education, marital status, household size and purchase role, whether there are children under 18 in the household, employment status, job level and household-income range. For Spanish postal codes, Donatello also derives the corresponding Autonomous Community so the survey service does not need to ask for it again. Every optional answer can be skipped. This information is not taken from your Google account. Donatello records the version and time of your explicit consent and encrypts the profile before storing it.

If you voluntarily open X or Reddit through a Community Supporter card, Donatello stores the social network, the time the composer opened, the time you returned and your internal account ID. We also record whether the wording we suggested referenced another product, but we do not require you to use that wording or to make a positive statement. X and Reddit do not tell Donatello whether you published, so this record is not a verified post. This activity grants no credits, payment, priority or account benefit.

When you open a Community Supporter card, Donatello creates and stores one editable suggested post for that account and network. The record includes the suggestion, whether it used a neutral competitor comparison, the browser-derived or explicitly chosen language code, the generation method and, when Gemini Flash is used through our text-generation infrastructure, token and provider-cost metadata. The language is not inferred from your IP country. Donatello does not record what you ultimately write on the social network.

If you open or share a Donatello referral link, we process the referral code, click time, whether the click came from an already authenticated account and a keyed pseudonymous visitor fingerprint used to deduplicate clicks. We do not store the raw IP address in the referral record. If a new account registers through a valid link, we store the permanent direct relationship between the two internal account IDs and append-only credit events needed to calculate and reverse the 5% reward. The referrer sees only a masked version of the referred account's email address.

3. Why we use information

We use information to:

• create, authenticate and maintain your account;
• provide the generators and preserve your work;
• prevent fraud, abuse and security incidents;
• prove which Donatello Agent licence was accepted and enforce its security and usage conditions;
• diagnose failures and improve reliability;
• record voluntary returns from community composers, prevent duplicate one-time actions and maintain an internal supporter record; and
• attribute direct referrals, calculate one-level rewards, prevent duplicate or fraudulent claims and provide private affiliate reporting; and
• meet legal obligations and respond to valid requests.

These activities are based on providing the service you request, our legitimate interest in securing and improving it, consent where the law requires it, and applicable legal obligations.

4. Cookies and local storage

Donatello uses essential authentication, security and preference cookies. The Donatello session cookie is encrypted in transit, unavailable to browser scripts and normally expires after 30 days. Google may set or read its own cookies while providing Google Sign-In under Google's policies.

The sign-in consent cookie is essential, unavailable to browser scripts and expires after 10 minutes or immediately after it is used. The associated receipt records the policy versions and acceptance time for compliance purposes.

A referral-link visit uses an HTTP-only first-party attribution cookie for up to 30 days so a later registration can be credited to the first valid referrer. A separate random HTTP-only visitor cookie may remain for up to 180 days to count unique referral clicks without storing a clear IP address. These cookies are not used for third-party advertising and do not expose another user's identity to the browser.

With your permission, Donatello uses privacy-conscious first-party measurement and Google Analytics 4 to understand visits and interactions such as page views, navigation, referral source, campaign parameters, registration and generation progress. A random browser identifier distinguishes new and returning visitors, while a random session identifier links those actions to the originating visit. Generation measurement contains only the product category, technical generation ID and status; it does not contain the prompt or generated file. Analytics runs with Google Consent Mode v2 in basic mode: the Analytics tag does not load and no Analytics data is sent until you select Allow analytics. Advertising storage, advertising user data and ad personalization remain denied. We do not intentionally send your prompts, generated media, Google account details or Donatello user ID to Google Analytics. If you register after allowing analytics, Donatello associates the account internally with the earliest consented visit still available for that browser. This records the landing page, visible referral source and campaign parameters so Donatello can understand how future registrations first found the service. If no consented session is available, the registration is explicitly recorded as unattributed rather than inferred.

Your analytics choice is stored in a first-party preference cookie for up to one year. You can reopen Cookie settings in the footer and withdraw permission at any time; Donatello then stops Analytics collection and removes accessible Google Analytics cookies for this domain. Google processes Analytics data under its own privacy terms and may process it outside your country.

Survey services and research partners may use their own cookies or similar technologies after you choose to open a survey in a separate tab. Those technologies are governed by their policies, not by Donatello's essential session-cookie policy. Donatello saves this versioned choice to your account so the same notice does not interrupt every offer. You can revoke it from My account, and we ask again if the notice materially changes.

5. Service providers and international processing

We use specialized infrastructure and authentication providers to operate Donatello. Google processes information when you use Google Sign-In. Dodo Payments processes billing identity, payment, tax, invoice, fraud-prevention and refund information as merchant of record when you choose a paid feature. Our specialized generation infrastructure processes image, video, music and voice requests. These providers receive only the inputs required to perform the generation you ask for. Donatello downloads completed outputs into its private media store for delivery to your account.

When you choose optional surveys, the survey service receives the survey-specific identifier and technical information such as IP address and browser or device information directly. It uses that information to match surveys, attribute completions and prevent fraud. Survey and research partners may process data outside your country under their own privacy terms.

If you activate the optional survey profile, Donatello sends the profile fields from Section 2 from its server to CPX Research and TheoremReach for survey matching, earlier eligibility checks, reduced repetition and fraud prevention. Donatello does not send your Google email or display name with that profile. CPX receives only the profile fields supported by its documented integration; TheoremReach may receive the additional answers you chose. Each partner processes information it has already received under its own privacy policy.

When you open an optional community composer and this Donatello tab becomes active again, your browser tells Donatello that you returned. X or Reddit does not send Donatello a post URL or a publication confirmation. Donatello therefore does not inspect or verify a post, does not store its URL, does not post on your behalf and does not request access to your social account.

We do not sell personal information and do not share it for third-party behavioral advertising.

6. Retention and security

Generated images and videos, uploaded references and other creative files are stored for no more than 72 hours from the time they are placed in Donatello storage. They are then removed automatically. Download any file you want to keep before its expiry time. Lightweight history such as prompts, creation time, media type, processing status and the fact that a file expired may remain in My creations while your account is active.

Generated songs, voice audio and their uploaded references follow the same 72-hour file-retention limit. Lightweight metadata may remain in your private library after the underlying file expires, or until you delete the record.

Account identity data is retained while your account remains active and for the limited period required for security, dispute resolution or legal compliance afterward. Active sessions normally expire after 30 days and can be revoked when you sign out. We use access controls, hashed session tokens, encrypted transport and infrastructure isolation to protect information. No online system can guarantee absolute security.

Referral click records are retained for fraud prevention and aggregate program measurement. When an account is deleted, its referral link is disabled and pseudonymous click records attached to that link are deleted. Direct relationship and credit-ledger records may be retained in pseudonymized form where necessary to preserve accounting, reversals, abuse prevention or legal claims; the deleted account's email is replaced with a non-routable deletion address.

Billing records are retained for transaction support, disputes, fraud prevention, tax, accounting and other legal obligations. Dodo Payments retains the payment data it controls under its own privacy policy and applicable merchant-of-record duties. Deleting a Donatello account does not require either party to erase records that must legally be retained.

Daily authenticated activity is retained while the corresponding Donatello account remains active and is deleted with that account. It is used for aggregate operational measures such as daily active registered users.

Donatello Agent licence-acceptance records are retained with the corresponding account and deleted with that account, except where limited retention is reasonably necessary to establish, exercise or defend legal claims or to meet a legal obligation. The local copy remains on the device until the Agent data is removed.

Donatello's consented first-party web analytics sessions, referral attribution and associated anonymous interaction events are retained for up to 90 days. Withdrawing analytics consent removes the accessible first-party visitor and session identifiers from your browser and stops future collection.

For registrations created after account-level acquisition measurement begins, the resulting first-touch source record is retained with the Donatello account and deleted with that account. The underlying consented browser sessions remain subject to the 90-day limit. Historical accounts are not guessed or backfilled.

Your optional survey profile remains encrypted in Donatello only while you keep it active. You can delete it from Earn Free Credits at any time. Deletion stops future profile sharing but cannot erase data already received by a survey partner; requests about that copy must be made under the partner's policy.

A community composer-return record is retained with your account to prevent the same one-time action from appearing again. No post URL is collected for this record. It is deleted when the associated Donatello account is deleted, unless limited retention is required for security or legal compliance. Any post remains under your control through the relevant network.

7. Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. You may also complain to your local data-protection authority. Contact privacy@donatello.studio to make a request. We may need to verify your identity first.

You can edit or delete the optional survey profile directly from My account without deleting your Donatello account.

8. Children

Donatello is not directed to children under 18. Do not create an account if you are below the age required to consent to online services in your country.

9. Changes to this policy

We may update this policy as the service evolves. Material changes will be identified on this page and, when appropriate, announced inside the service before they take effect.