Who handles your information
TwelveBirds Technologies Inc. operates Twelva at twelva.ai and twelva.twelva.ai. Contact us at hello@twelva.ai. This notice covers Twelva accounts, creative workspaces, payments, service enquiries and the Twelva processing of visits and enquiries on websites hosted using Twelva. It does not cover TwelveBirds Domain or TwelveBirds Formation, which have separate services and privacy notices.
We determine the purposes of account, billing, service security and regional-access processing. When a customer uses Twelva to host a website and receive visitor enquiries, that site owner determines the purpose of its collection and use; we process the hosted information to provide the relevant service. The owner’s notice should identify them and explain their use. Contact the site owner about that use, or contact us for help routing a request.
Account and workspace information
An account stores your name, email address, protected password hash and contact phone number. A contact phone number is required at registration. Phone numbers are not verified or used to sign in. We also process your declared residence country or region, your adult-eligibility confirmation, accepted terms and acknowledged privacy versions, and the server-recorded time and history of those actions. These records support account administration, access eligibility and evidence of the terms applicable to your use.
We process your messages, generated answers, project settings, brand references, uploaded files, creations, generation and task history, saved versions and usage records to provide the features you request. Information comes from you, people authorized to use your workspace and the services that return processing results. Support correspondence and the references you send help us investigate and respond to requests.
Documents retain their original file and extracted text for reading, downloading and reference. Attaching a document to a conversation can send relevant text and source references with an AI request, including later messages in the same conversation. Clearing a document or brand setting does not remove text already copied into a conversation or published output.
Location and access decisions
Our hosting infrastructure processes network information, including IP addresses, and can provide an approximate country or region derived from your connection. We use that country, its source, your declared residence country, the requested capability or model, and the applicable access-policy version to decide whether generation or a purchase is available. These checks support our regional rollout, provider requirements, security and applicable restrictions. They are not a determination of your nationality or precise physical location.
An eligibility decision may prevent a new generation or purchase without preventing you from managing saved work, billing or privacy requests. Account acceptance records and relevant task or transaction records may retain the associated region and policy information to explain decisions, prevent circumvention, handle disputes and investigate errors. Network information can also appear in hosting and security records.
Approximate location and account information can be wrong or out of date. Email hello@twelva.ai to request human review or correct your declared residence. Include your account email, actual country or region and the error message. We do not require a passport or identity document in the initial request. We will explain if proportionate additional evidence is necessary. Our regional terms describe the current rollout.
AI providers and custom training
For ordinary chat, website creation and supported media requests, we send prompts and the context needed for the request through Vercel AI Gateway to the applicable model provider. Context can include conversation history, selected document excerpts, brand instructions and reference images. The permitted route depends on the selected model, feature, region and availability; an eligible fallback may be used when supported. Provider services receive the information needed to generate and return a result.
Processing, logging and retention differ by service and model route. We do not promise universal zero retention, provider-independent confidentiality or that every provider excludes all data from model improvement. Do not submit confidential or regulated information unless you have confirmed that the particular feature and applicable arrangements meet your needs. We are responsible for explaining our own processing; provider notices provide additional detail about their services. Vercel AI Gateway data controls.
Custom image training
If you choose custom image training, we obtain a separate authorization for that request. We collect the selected image references, model name, training job identifier, resulting model-file reference, status and associated authorization record. The images are packaged into a downloadable archive for fal.ai to retrieve and train the requested image model. This is a direct fal.ai integration outside AI Gateway. Later use of the model sends its model-file reference and your prompt to fal.ai for image generation. fal.ai privacy information.
The training archive uses a publicly accessible file URL and resulting model files are hosted by the provider. Your workspace listing does not make the underlying files private. Anyone who obtains a usable file URL may be able to access it. Do not select confidential images for training. Deleting a model listing does not itself delete its archive, provider files or previously generated images. Contact us for help with removal; we will explain the applicable provider and file limitations.
Hosted-site visitors and security
When you submit an enquiry through a Twelva-hosted contact form, we process the name, email address and message you provide, the related site and submission time, and the status of the enquiry so the site owner can read and manage it. Do not put payment credentials, identity documents or unnecessary sensitive information in an enquiry. The site owner is responsible for its subsequent use of your message; submitting an enquiry does not automatically subscribe you to marketing.
Hosted-site statistics use page addresses, referring-site information and navigation events to produce daily page and referral counts for the owner. The statistics beacon does not set a visitor tracking cookie. This does not mean that all visit processing is anonymous: hosting, request protection and rate limiting separately process technical information such as IP addresses and request timing. We use that information to deliver pages, prevent abuse, investigate errors and protect the service.
Cookies and saved preferences
Essential cookies maintain signed-in sessions. A sign-in session can last up to 30 days unless revoked earlier. A legacy guest identifier may be read to connect eligible older workspace records to an authenticated account; current generation requires an account. Signing out revokes the current session, and available account controls can revoke other sessions.
Your browser also saves input drafts and interface preferences. Clear a draft in the composer, or clear this site’s browser storage to remove locally saved data. Signing out does not erase all workspace records or local drafts. Blocking essential cookies can prevent sign-in and account features from working.
Recipients, payments and international processing
When you start a support conversation, we connect to Crisp on demand. Crisp and our support team process the name, email address, messages and any attachments you submit to handle your request. Support session cookies help keep the conversation available in your browser. Support is separate from your AI conversations; we do not automatically share your AI conversation history with support.
Service providers receive information for the functions they perform. They include Vercel for hosting, AI Gateway and Blob file delivery; the AI model services serving an eligible request; fal.ai for supported custom image training and generation; Neon for database storage where connected; and Stripe for enabled payments and billing management. Our account and transaction records include billing identifiers, plan status, payment events and credit activity. Payment details are entered on Stripe’s checkout page; we do not receive your full card number. Stripe privacy notice.
Authorized personnel and providers may process information to operate the service, support you and investigate issues. We may disclose information where required by law or lawful process, to protect rights and service security, or in connection with a business reorganization subject to applicable protections. Publishing and submitting a hosted-site enquiry also disclose information to the recipients you choose, as described above.
These services may process information in the United States and other countries where the relevant provider operates. Standard Twelva access does not include a promise of local-only hosting or storage in your residence country. A privacy-notice acknowledgement does not by itself waive legally required transfer protections. If your use needs a particular data location, transfer mechanism or processing agreement, contact us before uploading the affected information so we can establish whether that use is supported. Mainland China AI generation and new purchases are not currently offered; this notice does not represent that Chinese filing, local-representative or cross-border requirements have been completed.
Purposes and retention
We use information to provide requested features and administer the account and contract; take and reconcile payment; determine service eligibility; secure and support the service; handle requests and disputes; and meet applicable legal obligations. Where a law requires a legal basis, the relevant basis depends on that purpose: performing our agreement, complying with a legal obligation, legitimate interests such as proportionate security and service administration where available, or consent for processing that requires it. Optional, separately authorized training is not inferred solely from accepting the general privacy notice.
Account and workspace information is kept to maintain your account and saved work and address deletion requests. Billing and credit records may need to remain for accounting, reconciliation, disputes and legal obligations. Access-decision, acceptance and security records are kept according to their continuing need for access administration, abuse prevention, evidence and investigation. Support records are kept for handling and documenting the issue. Provider processing, backups and existing published copies can have separate retention conditions.
We consider the type and sensitivity of information, the purpose, account status, applicable requirements and outstanding disputes when determining retention. We do not promise one fixed deletion period for all categories or immediate erasure of every copy after an interface deletion. A deletion response will explain information removed, information retained for a legitimate applicable reason and any practical or legal limits.
Your choices, rights and updates
Use available controls to edit or clear brand memory, remove documents, manage messages and sign-in sessions, and manage billing. Content already copied into a conversation, version or published output may need separate action. To request access, correction, an export, account deletion or a review of a regional decision, email hello@twelva.ai. Include your account email and a description of the request, never your password. We may need proportionate information to verify your authority and protect other people’s information.
Depending on applicable law, you may also have rights to object, restrict processing, withdraw consent, obtain data portability or complain to a privacy regulator. Withdrawing consent does not change the lawfulness of prior processing and may prevent us from continuing the optional feature that needs it. We will respond within the applicable legal period and explain any lawful limits or appeal route. You can contact us without making a purchase or accepting a new terms version.
Twelva’s AI features and purchases are for adults as described in the terms. If you believe a child has submitted information through an account, tell us so we can investigate. Hosted-site visitors should follow the relevant site’s notice; a site owner must not use our enquiry forms to intentionally collect children’s or sensitive information without the necessary supported arrangements.
The effective date and version identify this notice. We will update it when our practices change and provide additional notice or obtain separate authorization where required. Contact TwelveBirds Technologies Inc. at hello@twelva.ai for questions or complaints.