Privacy Policy

BeeMatra ("we", "us") operates beematra.net (the "Service"). This policy explains what personal data we collect, why, and how you can control it.

1. Data we collect

• Account data: email address, password (stored only as a salted hash), optional nickname, optional avatar, optional phone number.
• Content you upload: material photos you submit for generation (including any cropped region) and the generated texture results.
• Billing data: payments are processed by PayPal. We never see or store your full card or PayPal credentials — we store only the transaction identifiers, plan code and credit ledger entries.
• Usage data: task history, credit ledger, API call logs (key prefix, endpoint, status, timestamps), and the IP address used for security and abuse prevention.
• Inquiries: messages you send via the contact form (email address, subject, message text).

2. How we use your data

• To provide the Service: run the material-generation pipeline, store and deliver your results, track your credit balance.
• To bill subscriptions and credit purchases through PayPal and to keep an accurate ledger.
• To authenticate you, secure accounts, prevent abuse, and respond to your inquiries.
• We do not sell your personal data, and we do not use your uploaded photos to advertise to you.

3. Cookies

We use a small set of strictly necessary cookies: a login session cookie (bmnet) and a language preference cookie (bmlang). We do not use advertising or third-party tracking cookies.

4. Sharing and processing

To generate materials, uploaded photos are processed by our generation pipeline and our upstream AI service provider. Photos are used solely to produce your results. Payments and subscription lifecycle events are processed by PayPal, Inc. under PayPal's own privacy policy. We may disclose data where required by law.

5. Retention

• Account data is kept while your account is active.
• Uploaded photos, generated results and task records are kept so you can access your history; expired credit batches are cleared from the active balance automatically, while ledger records are retained for accounting integrity.
• Contact inquiries are kept for up to 24 months.

6. Your rights

You may access, correct or delete your personal data at any time: account details and avatars can be edited on the Account page; your credit ledger and task history are available in your Account. For export or deletion of your account and content, email hello@beematra.com — we respond within 30 days.

7. Security

Passwords are stored as salted hashes, all traffic is served over HTTPS, session cookies are HttpOnly and Secure, and API keys are stored only as prefixes with hashed secrets.

8. Changes to this policy

If we make material changes we will update this page and revise the effective date. Continued use of the Service after changes take effect constitutes acceptance.

9. Contact

Questions about privacy: hello@beematra.com.