Privacy policy.

Creator MAX runs on your computer as a Photoshop UXP panel. Provider calls go straight from Photoshop to the provider you enabled (Google's Gemini, OpenAI, or xAI), using the API key you entered. Image generation sends the prompt, selected image data, and any references required for that request. Optional Enhance Prompt can send your prompt text and current Photoshop selection to the separately configured Enhance provider and model.

• Your prompt history, reference library, and generation history are stored locally on your machine. They are not uploaded to Bielfor; inputs needed for generation or Enhance Prompt are sent directly to the provider you selected for that action.
• Your API keys are stored in Photoshop's preferences on your machine. An API key is sent directly to the selected provider to authenticate its request, but is never sent to Bielfor.
• There is no telemetry, no analytics, no crash reporting, and no usage tracking inside the plugin.
• Bielfor never proxies, logs, or stores your prompts, images, or keys. There is no Bielfor server in the request path.

Each provider handles the data in that direct call under its own terms. What you send and generate is governed by the policy of the provider whose key you used:

• Google (Gemini / Nano Banana models). Google's privacy policy →
• OpenAI (GPT Image 2). OpenAI's privacy policy →
• xAI (Grok image models). xAI's privacy policy →

The website collects very little, and never sells anything it does collect.

• Cookieless analytics. bielfor.com uses a Bielfor-controlled Umami deployment hosted by Vercel to measure how the site is used. It records page visits, referrers, approximate location, device/browser information, Core Web Vitals, CTA selections, theme changes, external destination host and path without query strings, and first reach of 25, 50, 75, or 90 percent scroll depth. The tracker sets no cookies and stores nothing on your device. If notification signup is later enabled, it can also record form outcomes, never the entered email.
• Anonymous sessions only. Umami derives an anonymous session hash from the request IP address, browser user agent, and website ID. Bielfor does not use it to identify you, attach an email or account identifier, create an advertising profile, or track you across other sites. The site does not enable session replay, heatmaps, or a distinct user ID, and the tracker sets no analytics cookies.
• Opting out. The tracker honors your browser's Do Not Track setting: with it enabled, no analytics request is sent at all. Analytics never affects site functionality.
• Social campaign measurement (Metricool). bielfor.com also loads a small script from tracker.metricool.com that sends one anonymous request per page view, containing the page URL, referrer, and browser window size, so clicks from Bielfor's social media posts can be attributed. It sets no cookies and stores nothing on your device; like any web request, it reaches Metricool's server with your IP address. Metricool's policy →
• Email signup. Product notification signup is not currently offered on the public site. If notification signup is enabled later, the Bielfor endpoint (/api/notify) will receive the email address and product name only after you submit the form. Cloudflare KV can then store the signup time, browser user-agent, and country code for deduplication and abuse review for up to 12 months; Resend can receive the email and product name to deliver the requested notice. You can ask me to delete or unsubscribe it at any time.
• Theme preference. The site remembers whether you picked light or dark mode in a single local value on your device. It is never sent to Bielfor.
• Essential preview access. An operator-only preview link can set a secure, HTTP-only bielfor_preview cookie for up to 30 days so an authorized reviewer can see the site while public access is offline. It is not used for visitors, advertising, or analytics.
• Site delivery and fonts. Cloudflare delivers and protects the website and necessarily processes request information such as IP address and headers. Google Fonts serves the site's Jost and Geist Mono files. Adobe Typekit serves the site's approved display face across the public website. Those font providers receive the request information needed to serve their files.

Creator MAX is sold through the Adobe Creative Cloud Marketplace (Adobe Exchange). Adobe processes the payment and can provide Bielfor with transaction or license information needed to fulfill and support the purchase. Bielfor does not receive your full payment-card number from Adobe.

Your purchase is governed by Adobe's privacy policy in addition to this one. Adobe's privacy policy →

• Consent: the product notices you explicitly request. You can withdraw consent at any time.
• Legitimate interests: anonymous, cookieless audience measurement that cannot identify you (you can opt out with Do Not Track).
• Contract or steps you request before a contract: answering support, purchase, refund, and licensing questions and providing the product you bought.
• Legitimate interests: delivering, securing, debugging, and protecting the website, provided those interests are not overridden by your rights.
• Legal obligations: keeping the purchase, tax, and accounting records the law requires.

I don't sell data, and I don't run ads.

These are the only services that touch any data, each under its own policy:

• Adobe Creative Cloud Marketplace, for payment and license delivery. Adobe's policy →
• Google, OpenAI, and xAI, each called directly by the plugin with your own key for the generations you run (see section 1).
• Cloudflare, for website delivery, security, and—only when enabled—notification storage. Cloudflare's policy →
• Vercel, which hosts Bielfor's Umami deployment. Vercel's policy →
• Metricool, which receives the anonymous page-view beacon described in the analytics section. Metricool's policy →
• Vimeo, which serves the product video embedded on the Creator MAX page. The player loads only after you press play, in Do-Not-Track mode, so it does not set tracking cookies or build a viewing profile; playing the video sends ordinary web requests to Vimeo. Vimeo's policy →
• Resend, only when the notification integration is enabled, for the notices you requested. Resend's policy →
• Google Fonts and Adobe Typekit, which serve their approved font files across the public website. Adobe's policy → · Google's policy →

Some providers may process data outside your country. Their linked policies describe their processing locations and transfer safeguards. Email me if you need the safeguards applicable to a particular transfer.

• Umami analytics records are automatically deleted no later than 13 months after collection.
• Cloudflare KV notification records expire after 12 months. A Resend contact remains until you unsubscribe, ask for deletion, or the requested product notice is no longer relevant.
• Support correspondence is kept only as long as needed to resolve and document the request, unless a longer legal period applies.
• Purchase and tax records are kept for the period required by accounting and tax law, generally up to seven years.
• Plugin data lives on your machine, under your control, and Bielfor keeps no copy of it.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, receive a portable copy, and withdraw consent without affecting earlier lawful processing. Email support@bielfor.com and I'll respond without undue delay and normally within one month. In Spain, you can also complain to the Agencia Española de Protección de Datos (AEPD) →; elsewhere, you can contact your local supervisory authority.

Bielfor products are made for professionals working inside Photoshop and similar tools. I don't knowingly collect anything from anyone under 16.

Bielfor LLC is organized under the laws of the State of Delaware, United States. Nothing in this policy limits mandatory privacy or consumer protections, or your right to contact a competent supervisory authority, in the country where you live.

If I change this policy, I'll update the effective date above. If a change is material and I have your email on file, I'll let you know.

Bielfor LLC · support@bielfor.com. The same person who answers support answers privacy questions. That's me.