Brand Data Security
Your designs are your competitive advantage. Here's how we protect them.
Will my designs train your AI?
Smasher Studio does not use your inputs or outputs to train any model. To produce your results, your content is sent to the AI providers named in our Sub-Processor List, and each of them handles it under its own terms. Some of those providers may retain your inputs and outputs to improve their own models, under their own terms.
Where is my data stored?
The photos you upload and the content generated for you are stored on Storj, a decentralized storage network. Our servers hold the keys that read these files, so that the studio can show them to you and send them to the AI providers when you ask for a result.
Who can access my designs?
Other members cannot access your designs and generated content. Our team does not use or share your content. We read it only to run, support and improve the service. All API calls use encrypted transport (TLS 1.3).
Can I delete my data?
Yes. You can delete your account yourself in your settings. It takes effect at once and erases your conversations, your photos and your generated content. For any other request about your data, write to privacy@smasher.studio.
How is authentication handled?
We use industry-standard JWT authentication with secure httpOnly cookies. Passwords are hashed with bcrypt. We support magic link authentication as a passwordless alternative.
What about payment security?
All payment processing is handled by Stripe, a PCI DSS Level 1 certified processor. We never store credit card numbers on our servers.