Studio
$20/moper month
The whole studio, AI included. No provider account to set up.
- Renews monthly. Unused AI allowance does not roll over.
Legal
Privacy Policy
Read with the Terms of Service.
01Who we are
Planetarium Studio (“we,” “us” or “our”) is operated by its owner as a sole proprietorship based in Texas, United States. This Privacy Policy explains how we collect, use, share and protect personal information when you visit planetarium.studio or use the Planetarium Studio applications (the “Service”).
We are responsible, as the controller, for the personal information this policy describes. If your content includes personal information about other people, you are responsible for having the right to share it with us, and we use it only to provide the Service to you.
You can reach us at admin@planetarium.studio.
02What we collect
Account information
Your email address, your name, and any display name you choose. Your password, which we store only as a salted scrypt hash and never in readable form. When your account was created and when you last signed in, and your settings, such as AI preferences. Administrators also have two-factor authentication details, which are stored encrypted.
If someone invites you to the Service, they give us your email address, and your name if they enter it, so that we can send you the invitation.
Billing details
If you ask for a paid plan, the billing contact details you enter: name, organization, email address, postal address, country and, if you give one, a tax ID, together with the plan you asked for. We don’t take payments yet. When we do, card details will go directly to a payment processor, and we won’t store full card numbers.
Your content
The presentations you make, including their text, structure and design, and the images and other media you add or generate. Themes you create or publish. If you use Restyle, the details of each job: the file name and the instructions you write. Restyle is in preview and doesn’t yet accept document uploads.
Usage records
For each AI request: when it happened, which model answered, how many tokens it used, and its cost. We use these records to run plans and allowances. They don’t include what you asked or what the model said.
Your own AI key
If you connect your own OpenRouter account, the key you provide, which we store encrypted, and its last four characters, so that you can recognize it.
Technical information
Our web server keeps an access log of requests. It records your IP address, the address of the page or file requested, the time, and your browser’s user agent, and we use it to keep the Service secure and to diagnose problems. Our application logs don’t record IP addresses or the content of your requests. To limit repeated sign-in and password-reset attempts, we also use your IP address briefly, in memory, in a form that can’t be read back.
Messages you send us
If you email us, your message and our reply.
We don’t ask for sensitive information such as health, financial account or biometric data, and we ask you not to put it in your content.
03How the AI features handle your content
When you use the agent, image generation or the theme tools, your browser sends the content the task needs to our server, which passes it to OpenRouter, Inc., an AI routing service. OpenRouter sends it on to the provider of the model that answers. Depending on the task, that content can include:
- your instructions, and the recent messages in your conversation with the agent;
- the text, structure and design of the presentation you’re working on;
- text and page images from reference files you attach, which are read in your browser, kept only for that session and never stored on our server;
- images from your presentation, when you use them as references for image generation; and
- images of your slides, if you turn on the vision setting, which is off unless you choose it.
We don’t send your name, email address or IP address with these requests. OpenRouter sees our server’s address, not yours.
When the Service uses its own OpenRouter account, the agent’s text requests are routed only to providers that, under OpenRouter’s data policies, don’t collect user data. An optional zero-data-retention setting narrows this further, to providers that keep nothing at all. Image generation requests are handled under the image provider’s own data policies. Model providers use your content to produce a response and may retain it only as their own policies allow.
We don’t use your content to train AI models, and we don’t store the text of your requests or the models’ replies on our server. Your conversation with the agent is kept in your browser: the last 60 messages for each presentation. Clear chat removes it.
If you connect your own OpenRouter key, requests are made under your OpenRouter account, and its settings and OpenRouter’s terms govern how they are handled. We decrypt your key only on our server to make the requests you ask for, and we never send it back to your browser.
If you export a presentation as a standalone file and use its AI features, that file contacts OpenRouter directly from your browser with a key you enter. We aren’t involved in those requests.
04How we use information
- To provide the Service: run your account, save your work and generate the content you ask for.
- To keep it secure: sign you in, prevent abuse and fraud, limit repeated attempts and investigate problems.
- To run plans and allowances and, once paid plans are available, to bill for them.
- To send the emails the Service needs, such as invitations and password resets. We don’t send marketing email.
- To answer your questions and requests.
- To comply with the law and enforce our Terms of Service.
- To understand, in aggregate, how the Service is used, for example total usage by model, so that we can keep it running well.
We don’t use your content to train AI models, and we don’t use personal information for advertising or to build profiles of you.
07How long we keep it
- Your account
- For as long as it’s open. When your account is deleted, we delete your account information and your content from the Service within 30 days.
- Your content
- Until you delete it. Deleting a presentation removes it from the Service right away. Images and other media are stored separately and are deleted along with your account.
- Usage and billing records
- For as long as we need them for accounting, tax and legal purposes, generally up to seven years. They don’t contain your content.
- Access logs
- Up to 90 days.
- Invitation and reset links
- They expire after 48 hours and 1 hour, and stop working once used.
- Backups
- Deleted information can remain in server backups for up to 35 days, until they are replaced.
- Your browser
- Information the editor keeps on your device stays until you clear it.
- Messages to us
- As long as we need them to handle your request and keep a record of it.
08How we protect it
Connections to the Service are encrypted with HTTPS. Passwords are stored as salted scrypt hashes. AI keys and two-factor secrets are encrypted with AES-256-GCM. Stored data can be read on the server only by the Service itself, and access to the server is limited to its operator.
No system is completely secure, so we can’t guarantee the security of your information. If a breach affects your personal information, we’ll tell you, and the authorities, as the law requires.
09Your choices and rights
You can update your display name and password on your account page, and you can export any presentation from the editor. For anything else, such as a copy of your information, a correction like a new email address, or deleting your account and content, email admin@planetarium.studio from the address on your account. We’ll confirm that the request is yours and respond within 30 days.
Depending on where you live, the law may give you the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses of it, to withdraw consent, and not to be treated differently for using these rights. We honor these requests from everyone, wherever they live.
If we decline a request, we’ll explain why. You can appeal by replying to our decision, and we’ll respond to an appeal within 60 days. If we deny your appeal, you can contact your state attorney general or your data protection authority.
You can ask someone else to make a request for you. We’ll ask for proof that they are authorized to act on your behalf.
10If you are in the EEA, the UK or Switzerland
Legal bases. We process personal information to perform our contract with you, which covers running your account and the Service; for our legitimate interests in keeping the Service secure, preventing abuse and improving it, weighed against your rights; to meet legal obligations, such as keeping tax records; and, where we ask for it, with your consent.
International transfers. We are based in the United States, and your information is stored and processed there, both by us and by our service providers, some of whom also operate in other countries. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.
Automated decisions. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
Complaints. You can complain to the data protection authority where you live or work. We’d be grateful for the chance to address your concern first.
11If you live in the United States
In the past 12 months we have collected these categories of personal information: identifiers, such as your email address, name and IP address; customer records, such as billing contact details; commercial information, such as your plan and usage records; internet activity, in the form of web server access logs; and the content you create. We collect them from you, from anyone who invites you, and from your use of the Service. We use them for the purposes in How we use information, and we disclose them only to the service providers in Who we share it with, for those purposes.
We don’t sell personal information or share it for cross-context behavioral advertising, and we haven’t done so in the past 12 months. We use your password only to sign you in, and we don’t use sensitive personal information to infer anything about you.
If you live in California, Texas or another state with a consumer privacy law, you can use the rights described in Your choices and rights in the same way.
12Children
The Service is for adults. You must be 18 or older to use it, and we don’t knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we’ll delete it.
13Changes to this policy
We’ll post any update here with a new effective date. If a change is material, we’ll tell you by email or through the Service before it takes effect.
14Contact
Questions and requests about privacy can be sent to admin@planetarium.studio.
Planetarium Studio · Texas, United States