Privacy Policy

How Mona Lisa 1 collects, uses, stores, and shares information when you use the Service.

Aug 11, 2026

1. Scope

This Privacy Policy explains how Mona Lisa 1 ("we", "us", or "our") collects and uses information when you visit mona-lisa-1.app, create an account, join the model-update waitlist, purchase credits or a subscription, or use the GPT Image 2 image-generation workspace (the "Service"). Mona Lisa 1 is an independent product and is not affiliated with OpenAI, LM Arena, or another model provider.

2. Information we collect

Information you provide

Account information: Google account identifier and the basic profile details Google makes available, such as name, email address, and profile image. We use Google sign-in for account access.
Creation data: Prompts, settings, reference or uploaded images, generated images, task status, and generation history that you submit or create through the Service.
Waitlist information: Your email address and the model-update preferences you submit. Joining the waitlist is only for verified model updates; it does not grant access, priority, a release date, or a service commitment.
Support and transaction information: Messages you send to support and information needed to record purchases, credits, subscriptions, refunds, and payment status. Payment card details are handled by the payment provider, not stored by us.

Information collected automatically

We and our service providers may collect IP address, approximate location derived from IP, browser and device information, language, referring URLs, pages and features used, timestamps, error logs, security events, cookie identifiers, and credit or task usage. We use only the cookies and similar technologies needed for authentication, security, preferences, and basic operations unless a separate notice says otherwise.

3. How we use information

We use information to:

provide, authenticate, maintain, and personalize the Service;
send prompts and permitted reference images to the GPT Image 2 provider and return generated results;
store and deliver generated images and thumbnails, maintain task history, and administer credits and subscriptions;
operate the waitlist and send the model updates you requested;
prevent abuse, enforce safety and usage limits, investigate security incidents, and protect users and the Service;
provide support, send transactional messages, process payments and refunds, and comply with legal obligations; and
measure reliability and improve the Service using aggregated or de-identified information where practical.

We do not use your private prompts or uploads to claim ownership of your creative work. We process them only for the purposes described in this Policy and our Terms of Service.

We do not sell personal information. We share information only as reasonably necessary with:

Infrastructure providers: Cloudflare Workers, D1, R2, and related hosting, database, security, and storage services;
Authentication and communications providers: Google for sign-in and email or messaging providers used to respond to you or deliver requested updates;
AI and payment providers: the GPT Image 2 provider to perform generation, and payment processors to complete purchases, renewals, chargebacks, and refunds;
Professional advisers and authorities: when required by law, legal process, or a good-faith need to protect rights, safety, and the integrity of the Service; and
Business transfers: a successor or counterparty involved in a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

Third parties process information under their own terms and privacy policies. Data may be processed in countries other than where you live.

5. Retention and deletion

We retain information only for as long as reasonably necessary for the purposes above, including account operation, security, accounting, dispute resolution, and legal compliance. We may retain backups or records for a limited additional period. You can request account deletion by emailing support@mona-lisa-1.app. Deletion may not remove information that we must retain by law or that has already been irreversibly aggregated.

6. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, withdraw consent, or complain to a data-protection authority. You may also unsubscribe from non-essential update emails by using the link in the message or contacting us. We may need to verify your request and may deny or limit it where permitted by law.

7. Children

The Service is not directed to children under 13 (or the applicable minimum age). We do not knowingly collect personal information from children below that age. Contact us if you believe a child has provided information so we can review and delete it where appropriate.