Plantain

Privacy policy

Last updated 5 October 2026

Draft. This text describes how the service works today and is being reviewed.

Who is responsible

Plantain is responsible for your data. Contact: hello@getplantain.com.

What we collect and why

  • Account data: the name you give us, or, if you sign in with Google, your Google account ID and email address; a one-way hash of your API key; your credit balance and credit history. Needed to provide and bill the service. We use your email only to contact you about your account.
  • Prompts and generated images: needed to generate and deliver images. Do not put personal data in prompts.
  • Payment data: card payments are handled on the secure payment page of our payment provider MONEI. We receive the amount, the payment status and the last four digits and brand of the card; we never see full card details.
  • Technical logs: request times, status and error messages, kept to run and secure the service.

Who processes your data

  • Google Cloud (hosting, database and image storage in the EU region europe-west1, Belgium).
  • Google Gemini API (image generation). Your prompt is sent to Google and may be processed outside the EU under Google's terms and safeguards. Other customers are not given access to your prompts or images.
  • MONEI (card payments).
  • Google sign-in: when you sign in with Google, Google confirms your account ID and email address to us. Google's own privacy policy covers your Google account.

How long we keep it

Generated images: 30 days, then deleted automatically. Job records including prompts: as long as needed for billing, support and abuse prevention, and deleted on request once no longer needed for those purposes. Payment records: as required by tax law.

Your rights

You can ask for access to, correction or deletion of your data, object to or restrict its use, and ask for a copy, by writing to hello@getplantain.com. You can complain to the Andorran Data Protection Agency (APDA) or the data protection authority in your country.

Cookies

No trackers or analytics. Signing in with Google uses two strictly necessary cookies: one protects the sign-in against forgery (it lasts at most 10 minutes and is deleted when the sign-in finishes), and one keeps you signed in on this website so you can return to your account page (it lasts 30 days, or until you sign out). The API itself uses no cookies.