Privacy Policy

Last updated: March 2026

milliondollarai.io collects limited account and activity data required to run a collaborative digital art platform, including authentication identifiers, username/profile data, tile ownership, prompts, and payment references.

We use this information to provide core features such as purchases, generation workflows, moderation, leaderboards, profile pages, and support operations.

What We Store

  • Account and profile fields (for example username and avatar URL).
  • Tile metadata (coordinates, status, ownership, prompt, generated image URL, view counts).
  • Payment metadata from Stripe (for example customer IDs, checkout references, and transaction logs).
  • Moderation and abuse reports submitted by users or admins.
  • Commemorative and milestone badge award records (badge slug, award date, related canvas/tile references).

Milestone Giveaways and Badge Data

When a community milestone unlocks, we record giveaway run metadata (milestone id, timestamp, winner count) and badge holder rows linking your user id to the milestone badge awarded. Winner lists may be shown on milestone roadmap pages and public profiles.

Milestone badge data is processed to operate the platform, display recognition on profiles, and send in-app notifications. It is not sold to third parties.

How We Share Data

We share data only with service providers needed to operate milliondollarai.io, such as hosting, database, payments, and AI-generation providers. We do not sell personal data.

Public artwork and profile information may be visible to other users as part of the collective mosaic, galleries, and public profile pages.

EEA/UK Privacy Rights

Where GDPR or related laws apply, we process personal data on lawful bases such as contract performance, legitimate interests (platform safety and abuse prevention), legal obligations, and consent where required.

You may have rights to access, correct, delete, restrict, or object to processing, and data portability rights where applicable. You may also lodge a complaint with your local data protection authority.

Your Controls

You can update profile fields in settings and manage payment methods/receipts through the Stripe customer portal available in your dashboard.

To request account deletion under GDPR Article 17, use the delete-account feature in settings, or email contact@milliondollarai.io. Deletion anonymises your profile and removes your login. Your claimed tiles remain on the grid.

Data Controller

[Legal entity name and registered address — to be completed before launch.] Contact: contact@milliondollarai.io

Retention Periods

Account and profile data is retained for the lifetime of the account. Payment records are retained for 7 years to comply with accounting regulations. Activity logs are retained for 90 days.

Data Processors (DPA list)

  • Supabase (Supabase Inc.) — database and authentication hosting
  • Stripe (Stripe, Inc.) — payment processing
  • Replicate (Replicate, Inc.) — AI image generation
  • Vercel (Vercel, Inc.) — application hosting and edge delivery

Contact

Privacy requests: contact@milliondollarai.io