Eden Gen Privacy Policy
Version 1.1. Effective 10 November 2026.
1. Controller
Eden makers s.r.o., IČO 24518344, Plzeňská 3352/156, 150 00 Praha 5, Czech Republic ("we"). Contact for privacy matters: privacy@edengen.ai. We have not appointed a data protection officer.
For personal data contained in content you upload or generate (for example a person visible in a reference image), we act as your processor under our Data Processing Agreement. This policy covers data for which we are the controller.
2. Whose data
Account holders and workspace members, people who contact us, representatives of business customers, and members of our referral and affiliate programs.
3. What we collect and why
| Data | Source | Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|---|---|
| Email address, workspace name, role (owner or producer), workspace type | You | Account, sign-in, team management | (b) contract |
| Password, stored only as a salted scrypt hash | You | Sign-in | (b) contract |
| Google or Apple account email, if you sign in with Google or Apple | Google or Apple, at your request | Sign-in | (b) contract |
| Company name, company ID, VAT ID, country | You; checked against ARES or VIES | Invoicing, VAT, provider verification requirements | (b) contract, (c) legal obligation |
| Sign-up codes and sign-in links (stored hashed, valid 15 to 30 minutes) and sessions (up to 30 days, ended earlier after 14 days without use) | Generated | Secure sign-in | (b) contract, (f) security |
| Sign-up and sign-in attempt records: the email address used, IP address and, at sign-up, the browser user agent | Automatic | Rate limiting, locking out repeated failed sign-ins, preventing abuse of sign-up and promo codes | (f) legitimate interest in security and preventing abuse |
| Connections of AI clients you approve (MCP over OAuth): client name, the project and monthly cap you set, tokens stored as hashes | You; generated | Letting your AI client act for your workspace within the limits you approved | (b) contract |
| Payment data: Stripe customer ID and payment method ID, top-up history. We do not receive full card numbers. | Stripe | Payments, automatic top-up | (b) contract |
| Balance and ledger entries, invoices | Generated | Billing, accounting | (b) contract, (c) legal obligation |
| Prompts, reference images, video and audio references (which can include voice recordings), other uploaded files, generated images, videos and audio, project names, client labels and tags | You | Running the Service | (b) contract |
| Moderation records: decision, category, first 300 characters of a blocked prompt | Generated | Preventing abuse, meeting provider rules | (f) legitimate interest in safety and lawful use |
| API request log: method, path or MCP tool, status, duration, cost, error | Generated | Usage reports, support, debugging | (b) contract, (f) operation and security |
| Provider call log with a pseudonymous end-user ID (a one-way hash, not your email) | Generated | Answering provider safety inquiries about specific requests | (f) legitimate interest, provider requirement |
| Your own provider API keys (BYOK), encrypted with AES-256-GCM | You | Sending your requests with your key | (b) contract |
| Admin audit log of actions on your workspace (refunds, suspensions, verification) | Generated | Accountability | (f) legitimate interest |
| Support emails | You | Support | (b) contract, (f) |
| Referral and affiliate data: referral code used, link clicks, one-way hashes of IP address and browser user agent, rewards and commissions; for affiliates also payee name and payout destination (bank account or PayPal) | You; generated | Running the programs, preventing self-referral and fraud, paying commissions | (b) contract, (f) legitimate interest in preventing fraud |
| Technical server logs, which may include IP addresses | Automatic | Security, operation | (f) |
We do not use your data for advertising, we do not sell it, and we do not use your prompts or outputs to train AI models.
4. Automated decisions
Prompts and uploaded images are checked automatically by rules and by OpenAI's moderation model. A block stops a request; repeated blocks or content involving minors suspend the workspace automatically. You can ask for a human review at any time by writing to support@edengen.ai, and a person will review the decision.
5. Who receives data
- Upstream AI providers, for the requests you run: the provider of the route that runs each request (listed in the Subprocessor List), and for BYOK Routes the provider whose key you use.
- Service providers acting for us (processors): see the Subprocessor List.
- Google or Apple, if you choose to sign in with them.
- Stripe, for payments. Stripe also acts as an independent controller for some payment data.
- Our accountant and tax authorities, for invoices and accounting.
- Authorities or providers where the law or a provider safety process requires it.
6. Retention
| Data | Kept for |
|---|---|
| Account and workspace data | While the workspace exists, then 30 days |
| Uploaded inputs and generated outputs | 60 days from creation, or earlier if you delete them. API download links expire after 24 hours. |
| Data of a closed workspace | Member emails, prompts, keys and stored secrets removed at closure; files within 30 days of closure (usually within a day); billing details and invoices per the invoices row. Moderation records (which hold the first 300 characters of a blocked prompt), the provider call log and the API request log are kept for the periods in their own rows below |
| Your account after you delete it | Password and sign-in records deleted at once; your email is removed from every workspace you belonged to |
| Backups | Deleted data rolls out of encrypted backups within 30 days |
| Sign-in links and sign-up codes | 15 to 30 minutes (used once) |
| Sign-up attempt records | IP address and browser user agent removed after 7 days, the record deleted after 30 days |
| Sign-in attempt records | 30 days |
| Sessions | Up to 30 days, ended earlier after 14 days without use |
| Invoices and accounting records | 10 years, as required by Czech VAT and accounting law |
| Moderation records, provider call log | 12 months. A moderation record confirmed as a violation on review, or tied to a workspace suspension, is kept until 12 months after the review or the end of the suspension, whichever is later |
| API request log | 13 months |
| Support emails | 3 years after the last contact |
| Referral and affiliate records | While the program membership exists, then as long as accounting law requires for paid rewards and commissions |
7. Where data is processed
We host the Service, its database and file storage in the European Union. Some recipients process data outside the European Economic Area, in particular AI model providers (for example OpenAI and Google Cloud in the United States), our email delivery provider Resend (United States) and Stripe (European Union and United States). Where a recipient is in a country without an adequacy decision, we rely on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses in the recipient's data processing terms. The location of each provider is listed in the Subprocessor List.
You can ask us for a copy of the safeguards at privacy@edengen.ai.
8. Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to processing based on legitimate interest. Write to privacy@edengen.ai. You can delete files and close your workspace in the app. You can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or the authority in your country.
9. Security
Data is sent over encrypted connections (TLS). Passwords, sign-in links and sign-up codes are stored only as hashes, provider keys are encrypted at rest with AES-256-GCM, admin actions are logged, every query is limited to your workspace, and access is limited by roles. The measures are described in Annex 2 of our Data Processing Agreement.
10. Children
Eden Gen is not for people under 18.
11. Changes
We will publish changes here and tell workspace owners about material changes by email.