Privacy Policy

Medux is operated by Shanghai Lingzhiyu Technology Co., Ltd.. This policy covers personal information handled through medux.io, its media tools, and its API, MCP, and CLI services. It also covers communications with our support team.

Independent services you visit through Medux have their own privacy notices. This policy explains our handling of information; it does not replace those notices or any consent required by applicable law.

• Account details. Email sign-in involves your email address and verification information. Google sign-in can provide account identifiers, an email address, and profile information such as an avatar. We associate your account with an internal user ID.
• Media and task data. Tools process the text, prompts, images, video, audio, documents, settings, and file references you submit, along with task identifiers, status information, outputs, and reusable assets. Avatar and voice features can involve personal likeness or voice information. Only provide another person’s data when you have the necessary permission and lawful authority.
• Billing records. Purchases involve subscription, order, invoice, payment status, and credit usage information. Stripe processes payment details entered in its checkout or payment pages.
• Usage and technical information. Our services and integrations can receive network and browser information, page addresses, timestamps, request identifiers, and error information. PostHog records page visits and selected product events, such as opening checkout or completing a task. Signed-in activity can be linked to your user ID. Session recording may also operate when enabled in the analytics configuration.
• Support correspondence. When you contact us, we receive your contact information, message, and any attachments or task references you choose to include.

Information is used to authenticate accounts, execute requested media workflows, deliver outputs, manage assets, calculate credit usage, handle subscriptions and payments, and answer support requests. Technical and usage information helps diagnose failures, understand product use, and protect accounts and services from abuse.

Depending on applicable law, processing relies on providing the service you request, meeting legal duties, legitimate operational interests where permitted, or consent where required. A new use of personal information requires an appropriate legal basis and any notice or consent required for that use.

Running a media task can require sending submitted content and task parameters to the model or processing provider used for that capability. Hosting, file delivery, authentication, payment, and analytics providers also process information relevant to their services. Provider-specific retention and model-training terms can differ; contact us before submitting confidential content if you need details about a particular capability.

• Google supports optional Google sign-in. See Google’s privacy notice.
• Stripe supports payments and subscription billing. See Stripe’s privacy notice.
• PostHog supports product analytics. See PostHog’s privacy notice.

Information may also be disclosed when legally required, to address abuse or protect rights, or in a business reorganization subject to applicable notice and data protection requirements. A public link or a file you share with others can make that content accessible to its recipients.

Medux uses browser storage to maintain your sign-in session and account state. Analytics and third-party integrations may use cookies or similar storage for identifiers and session information. These technologies are part of the current website and integrations.

You can manage cookies and site storage in your browser, sign out, or remove stored site data. Blocking or clearing storage can end your session or affect features. Where consent is required for a particular technology, that consent must be handled under applicable law.

Medux account and business data are stored on infrastructure outside mainland China. Google, Stripe, PostHog, and media providers may also process information in different countries. International processing is subject to applicable data protection requirements and any required safeguards or consent.

Generated files have a limited availability period. The current default shown in Media Results is seven days; consult the retention notice and expiry time for the actual result. Reusable avatar and voice assets have separate retention rules based on your plan. Download files you need before they expire.

Uploaded materials and account, support, transaction, and operational records are retained for the service purposes that require them and any applicable legal retention duties. A result’s expiry time does not establish the retention period for every related record or a third-party provider’s copy. You can request details or deletion through [email protected].

We use reasonable safeguards to protect information. No online service can eliminate every security risk. Protect your account, verification codes, and API keys, and notify us if you suspect unauthorized access.

Depending on your location and applicable law, you may request access, correction, deletion, a copy of your information, restrictions on processing, or withdrawal of consent. You can manage available media results, assets, and API keys in your account. Contact [email protected] for other requests, including account deletion.

We may need to verify that a request comes from the account holder. Some records may need to be retained to meet legal duties or resolve disputes. Privacy requests are handled within the period required by applicable law. You may also contact the data protection authority with jurisdiction over your complaint.

Medux is intended for adults. A minor may use it only with the necessary parent or guardian authorization and supervision, and where local law permits. Contact us if you believe a child’s information has been provided without the required authorization.

This page may change as features, providers, or legal requirements change. The date above identifies the latest revision. Material changes will be communicated as required by applicable law, with additional consent sought where required.

Shanghai Lingzhiyu Technology Co., Ltd.
Room 206, South Second Floor, Changyang Valley, 1687 Changyang Road, Daqiao Street, Yangpu District, Shanghai, China

For privacy questions or requests: [email protected].

Our Support page explains what to include in a request. These privacy arrangements are governed by mainland Chinese law, subject to any mandatory rights and protections that apply in your location.