Privacy Policy
Effective Date: October 27, 2026
1. Who We Are
This Privacy Policy explains how Mekumek LLC (“Pastaio,” “we,” “us”) collects, uses, and shares information when you use our website and service at pastaio.ai (the “Service”).
2. Information We Collect
a) Account Information
When you sign in with Google, we receive your name, email address, and profile picture from Google, as authorized by you during sign-in. We do not receive your Google password.
b) Usage Data
- Prompts you submit for content generation.
- Generated content (videos, images, audio) and associated metadata (model used, resolution, duration, generation status, timestamps).
- Credit balance and transaction history (purchases, usage, refunds).
c) Payment Information
Payments are processed by Stripe. We do not collect or store your full payment card number. We receive limited transaction metadata from Stripe (e.g., amount, date, payment status) necessary to credit your account.
d) Technical & Log Data
Our hosting provider (Vercel) automatically logs standard technical information when you use the Service, including your IP address, browser type, device information, and request timestamps, for security, debugging, and abuse-prevention purposes.
e) Cookies
We use essential cookies to keep you signed in and maintain your session. We do not currently use third-party advertising or tracking cookies.
3. How We Use Your Information
We use the information above to:
- Provide, operate, and maintain the Service (including processing your generation requests through our third-party AI providers);
- Process payments and maintain accurate credit balances;
- Detect, prevent, and respond to fraud, abuse, or violations of our Terms of Service;
- Communicate with you about your account or the Service;
- Improve and troubleshoot the Service.
We do not sell your personal information to third parties, and we do not use your prompts or generated content to train our own AI models.
4. How We Share Information
We share information only with the service providers necessary to operate Pastaio, each acting under their own privacy obligations:
| Provider | Purpose | Data Shared |
|---|---|---|
| Authentication (sign-in) | Name, email, profile picture | |
| Our AI infrastructure and model providers that process generation requests on our behalf | Content generation | Your prompts, and any images you upload for generation |
| Stripe | Payment processing | Transaction details (Stripe handles your card data directly; we never see it) |
| Vercel | Hosting and infrastructure | Technical/log data (IP address, request data) |
| Neon | Database hosting | All account and usage data stored in our database |
We may also disclose information if required by law, subpoena, or to protect the rights, safety, or property of Pastaio, our users, or others.
5. Data Retention
We retain your account information and generation history for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you;
- Request correction or deletion of your personal information;
- Request a copy of your data in a portable format.
California residents: Subject to certain thresholds and exceptions under the California Consumer Privacy Act (CCPA), you may have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. We do not sell personal information as defined under the CCPA.
To exercise any of these rights, contact us at knyazjr@gmail.com.
7. Children’s Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at knyazjr@gmail.com and we will delete it.
8. Data Security
We use commercially reasonable technical and organizational measures (including encrypted connections and access controls) to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
Our service providers may process data in the United States and other countries. By using the Service, you consent to this transfer and processing.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. The “Effective Date” above reflects the latest revision.
11. Contact Us
Questions about this Privacy Policy? Contact us at knyazjr@gmail.com.