Privacy
Summary
Projects are private by default. ComicWave processes account details, source material, references, generated media, document versions, job records and credit movements to provide the service. We do not publish private projects or use them to train ComicWave models without a separate, explicit opt-in.
Information we collect
We collect account and authentication data; stories, scripts, prompts and files you submit; generated images and editable page documents; correction rules and review decisions; purchases, credit ledger entries and support correspondence; product usage events; and operational data such as device, request, security and error logs.
How we use information
We use information to authenticate accounts, generate and store requested work, preserve versions and continuity, deliver private exports, prevent abuse, account for credits and payments, diagnose failures, answer support requests and improve reliability.
Processors and transfers
ComicWave uses these service providers: Supabase for accounts, sign-in and the database; Cloudflare for private file storage (R2) and the Turnstile security check on account forms; OpenAI for story planning, writing assistance, and safety and quality checks on text and images; WaveSpeed for image generation, which runs OpenAI image models; Whop for hosted checkout and payment processing, and Polar only for pre-existing payments and subscriptions; Vercel for website hosting; and Render for background processing such as planning, drawing pages and preparing exports.
If you choose Continue with Google, Google confirms your identity under its own privacy policy and shares basic account details, such as your email address, with ComicWave.
Project content is shared only as needed for the requested operation. A launch-ready subprocessor list and transfer terms must be published before paid access is enabled.
Security check and cookies
Account forms for signing up, signing in, email links, password resets and verification codes load Cloudflare Turnstile, a security check that helps tell people from bots. Turnstile is not loaded on other pages.
ComicWave sets only essential cookies: the sign-in session, your interface language, the email address you typed on an account form (kept for 30 minutes so the next screen can use it), and a signed receipt, valid for 15 minutes, that records your agreement to the terms when you continue with Google. We do not use advertising cookies or Google Analytics. The app also keeps unfinished drafts in your browser's storage so your work survives a page reload.
Product usage events
To measure reliability and fix failures, ComicWave records a small, fixed set of its own product events, for example that a comic was started, a story plan was ready, a page finished, an export or checkout failed, or a sign-in attempt failed. Events contain internal IDs, statuses and a few allowlisted details such as plan, language or error code. They never contain your stories, prompts, email address or full web addresses.
Events are stored in ComicWave's own database with your account ID and are included in your data export. Failed sign-in attempts are counted without an email address, IP address or account ID. ComicWave does not use third-party analytics services.
Retention and deletion
Project content remains while the project or account is active, subject to backup and fraud-prevention retention. Deletion requests remove active copies and place backup copies on their normal expiry schedule. Payment, ledger, security and legal records may be retained where required.
Your choices and rights
You may request access, correction, export or deletion by using account controls or contacting privacy@comicwave.ai. Applicable law may provide additional rights, including objection, restriction and complaint to a supervisory authority.
Security
ComicWave uses row-level authorization, private object storage, short-lived download links, append-only billing records and restricted operational access. No service can promise absolute security; suspected incidents should be reported to security@comicwave.ai.
Contact
Privacy questions and rights requests can be sent to privacy@comicwave.ai. The operating legal entity, postal address, representative and jurisdiction-specific notices must be inserted after counsel review and before paid launch.