Privacy Policy

1. Who we are

flux-3.run is an independent image and video generation service inspired by the announced FLUX 3 workflow direction. It is not affiliated with, endorsed by, or operated by Black Forest Labs. For privacy questions or requests, email Email support.

2. Information we process

Google Sign-In information

If you choose to sign in with Google, Google provides a unique account identifier, your verified email address, name, and profile picture. We use this information to authenticate you, maintain your Credits balance and generation history, and display your signed-in state.

Essential session information

We use secure, HTTP-only cookies for OAuth security and sign-in sessions. The OAuth state cookie normally expires within 10 minutes. The signed session cookie normally expires within 7 days and contains a signed version of your Google account identifier, email, name, profile image URL, and expiration time.

Prompts, references, and generated media

When you submit a live generation, your prompt and optional reference image are first sent to OpenAI's moderation service for automated content-safety screening. Requests that violate our safety policy are blocked before a generation job is created or Credits are charged. Approved prompts, selected settings, and optional reference images are then sent to fal.ai to run FLUX 3 image or video workflows. We store account, Credits, job status, prompt, model, settings, cost, and output URL in Cloudflare D1 so you can track jobs and revisit recent assets. Generated media and uploaded references are configured with a one-year lifecycle on fal.ai infrastructure.

Early-access email field

The current early-access form only changes the interface in your browser. Email addresses entered there are not transmitted to or stored by us at this time.

Technical data

When you visit the site, hosting and security providers may process standard technical data such as IP address, browser type, request headers, timestamps, requested URLs, and security signals needed to deliver and protect the service.

Messages you send

If you contact us, we receive your email address and the information included in your message. We use it to respond, provide support, and maintain an appropriate record of the request.

3. How we use information

• Authenticate users and maintain secure sessions.
• Submit AI generation requests, track job status, deliver outputs, and maintain Credits balances and recent assets.
• Operate, secure, troubleshoot, and improve the site.
• Respond to support, privacy, and legal requests.
• Prevent abuse, fraud, and security incidents.
• Comply with applicable legal obligations.

4. Cookies

We currently use essential cookies for Google OAuth state validation and signed-in sessions. These cookies are required for the sign-in feature and are not used for advertising. We do not currently use advertising or behavioral-tracking cookies.

5. Service providers and external services

• Google: provides OAuth authentication when you choose Google Sign-In. Google processes information under its own privacy terms.
• Cloudflare: provides hosting, content delivery, DNS, and security services and may process technical request data.
• OpenAI: receives submitted prompts and optional reference images for automated content-safety moderation before generation. OpenAI processes this information under its own terms and privacy policies.
• fal.ai: receives submitted prompts, generation settings, and optional reference images; operates the selected AI models; and stores uploaded and generated media according to the configured lifecycle and its own terms.
• Sanity CDN and source publishers: deliver certain clearly labeled media used in the preview.

Links to external websites are governed by those websites' own privacy policies.

6. Data retention and security

Authentication data is kept in the signed session cookie for up to 7 days unless you log out sooner. Account, Credits ledger, generation-job metadata, prompts, and output URLs remain in our database until deletion is requested or they are no longer reasonably needed to operate and protect the service. Uploaded references and generated media are configured to expire after up to one year on fal.ai. Support messages are retained only as long as reasonably needed to address the request, protect the service, or meet legal obligations. Providers may retain security or technical logs according to their own policies.

We use reasonable technical safeguards, but no online system can guarantee absolute security.

7. International processing

Our providers may process information in countries other than your own. Where required, they are responsible for using appropriate safeguards for international transfers.

8. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing. You may also withdraw consent where consent is the legal basis. To submit a request, email Email support. We may need to verify your identity before completing a request.

You can end the local signed-in session at any time by selecting “Log out.” You may also manage access granted to this service through your Google Account settings.

9. Children's privacy

The site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

10. Changes to this policy

We may update this policy when features, providers, or legal requirements change. The “Last updated” date shows when the latest version took effect. Material changes will be presented through an appropriate notice on the site.

11. Contact

Email privacy and support requests to Email support.