Terms of Service for SpnLabs

Effective Date: November 19, 2025

Welcome to SpnLabs (the "Service"), operated by SpnLabs.com ("we," "us," or "our"). By accessing or using the Service, including any content, functionality, and services offered on or through spnlabs.com or our mobile applications (collectively, the "Site"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree with any part of these Terms, you may not use the Service.

These Terms incorporate our Privacy Policy by reference. Please read both carefully.

1. Eligibility

You must be at least 18 years old (or the age of majority in your jurisdiction) to use the Service. By using the Service, you represent that you meet this eligibility requirement and have the legal capacity to enter into these Terms.

2. User Accounts

• To access certain features (e.g., purchasing tokens, generating images/videos, or managing storage), you may need to create an account. You agree to provide accurate, current, and complete information during registration and to update it as needed.
• You are responsible for maintaining the confidentiality of your account credentials and for all activities under your account, including API keys. Notify us immediately of any unauthorized use.
• We reserve the right to suspend or terminate accounts for violations of these Terms or for security reasons.

3. Use of the Service

• Permitted Use: You may use the Service for personal or commercial purposes, such as purchasing tokens (credits) to generate AI-powered images and videos, utilize FFmpeg features for media processing, store files, or access future functionalities. Tokens are consumed based on the specific feature used. You may use any assets you upload or generate through the Service (e.g., images, videos, processed files) for commercial purposes, subject to these Terms and applicable laws. We provide an API for programmatic access to features. You may generate and manage API keys through your account to enable automation, bots, or workflows, provided they comply with these Terms. We encourage creative, non-harmful uses of the AI tools (e.g., generating fictional characters or art). However, all generations must comply with applicable laws and these Terms.
• Prohibited Use: You agree not to:
  • Use the Service to generate, upload, or process adult-oriented, sexually explicit, or pornographic content, including any depictions of nudity, sexual acts, or fetish material. While we cannot technically prevent all such uses, any detected or reported violations will result in immediate account suspension or termination.
  • Upload, input, or generate content involving minors (e.g., images of children) in any exploitative, harmful, or illegal context, such as child sexual abuse material (CSAM), grooming, or non-consensual depictions. This includes using real photos of children (e.g., a neighbor's child) as prompts or references for AI generation. You must ensure all inputs are legal, consensual, and do not infringe privacy rights. We prohibit and report any suspected CSAM to authorities as required by law (e.g., under 18 U.S.C. § 2258A).
  • Use the Service for activities that violate applicable laws (e.g., creating or distributing illegal content such as child exploitation material or threats of violence).
  • Reverse engineer, scrape, or interfere with the Service outside of authorized API usage (e.g., no unauthorized bots or scraping).
  • Upload viruses, malware, or content that infringes third-party intellectual property rights.
  • Impersonate others in a way that violates laws.
  • Overload or disrupt the Service beyond reasonable use (e.g., excessive generation requests that exceed rate limits).
  • Attempt to resell, transfer, or exploit tokens themselves (tokens are non-transferable and tied to your account).
• AI-Generated Content: The Service uses third-party AI providers to process your prompts and uploads. By submitting a prompt or file, you consent to its temporary transmission to these providers for processing only—they do not retain your data beyond what's needed for the generation (per their terms). We do not control or endorse the outputs, which may contain biases, inaccuracies, or unintended elements from training data. You are solely responsible for reviewing inputs (e.g., ensuring no harmful or illegal content like child images) and outputs for legality, appropriateness, and originality before use or distribution. We cannot prevent misuse (e.g., generating exploitative content from uploaded images), but violations may lead to account actions. As noted, we scan where feasible (e.g., ClamAV for malware), but no guarantees on detection of harmful content.
• User Content: You retain ownership of content you upload (e.g., prompts, files for processing) and any outputs generated from it. By uploading content, you represent and warrant that you own or have all necessary rights to the content, including any intellectual property rights, and that it does not infringe on third-party rights. You may use these assets commercially. By uploading, you grant us a worldwide, non-exclusive, royalty-free, perpetual license to host, process, display, monitor, and use the content (including for training and improving AI models and the Service). We do not routinely review or moderate your content; all responsibility for its legality and suitability rests with you. However, you agree that we may, at our sole discretion, monitor, review, or access your content for any reason, including to ensure compliance with these Terms, investigate potential violations, or respond to legal requests. We may use anonymized data for improvements. We scan uploads and generated content for malware where feasible, but we make no guarantee that any viruses or threats are detected or removed.
• API Usage: API keys are personal and non-transferable. You are responsible for all activity under your API keys, including token consumption from automated workflows (e.g., bots or integrations). We implement rate limits to manage usage, but these are not guaranteed to prevent excessive token spend, such as from infinite loops or errors in your automation. Monitor your integrations to avoid unintended usage.

4. Tokens (Credits) and Payments

• Tokens System: The Service operates on a prepaid token (credit) system. You purchase tokens via Stripe to access features like AI image/video generation, FFmpeg processing, and storage (including via API). Token consumption varies by feature. Unused tokens do not expire as long as your account remains active and the Service is operational, but are non-refundable, non-transferable, and tied to your account. Tokens spent through manual use, API calls, or automation (intentional or accidental) are final and cannot be refunded or restored, except as provided below for service failures. We scan outputs and uploads for potential issues where feasible, but we make no guarantees regarding detection or prevention of errors, and tokens spent are generally non-refundable.
• Refunds for Service Failures: In the event of a technical failure or anomaly that prevents delivery of expected outputs (e.g., generation not completing due to service-side errors), we may, at our sole discretion, refund the relevant tokens as a goodwill gesture. To request such a refund, contact slockhartbiz@gmail.com with details of the issue (e.g., timestamps, account info). We encourage users to report any frustrations or issues promptly so we can investigate and resolve them before escalation. Refunds are not guaranteed and are limited to cases where the failure is clearly attributable to the Service, not user error or prohibited use. All other token expenditures remain final and non-refundable.
• Purchases: All token purchases are final and non-refundable, except as required by law or as outlined above for service failures. You agree to pay all fees as displayed on the Site at the time of purchase. Prices for tokens and feature usage are subject to change at any time for any reason, with or without notice (e.g., due to costs from third-party providers like Stripe or AI APIs). We may introduce new features or adjust token costs without prior warning.
• Billing: Subscriptions or recurring purchases (if offered) auto-renew unless canceled. You authorize us to charge your payment method via Stripe and handle disputes through them. If a payment fails, access to features may be suspended until resolved.
• Taxes: You are responsible for any applicable taxes on purchases.
• Account Termination: Upon account termination (by you or us), any remaining tokens are forfeited.

5. Intellectual Property

• The Service, including code, designs, and logos, is owned by SpnLabs.com or our licensors. You are granted a limited, revocable license to use it per these Terms.
• Do not copy, modify, or distribute our content without permission. Trademarks like "SpnLabs" are protected.

6. Third-Party Services

• The Service integrates with third parties (e.g., Stripe for payments, AI providers for generation, FFmpeg for media processing). Your use is subject to their terms. We are not liable for their actions, downtime, or data handling.
• External links are provided for convenience; we do not endorse them.

7. Data and Privacy

• We collect and use personal data (e.g., payment info via Stripe, usage logs for token tracking) as described in our Privacy Policy. This includes IP addresses, session data, and generated content metadata for functionality, analytics, and fraud prevention.
• For storage features, we implement reasonable security for your files, but you use the Service at your own risk. We do not guarantee that your assets (uploaded or generated) will remain available indefinitely; we may remove or delete content at any time, including without notice, for reasons such as storage limitations, legal compliance, or discretionary review. We may disclose information about you or your content in response to valid legal process or as otherwise required by law. We may scan uploads and generated content for malware (e.g., via ClamAV), but we make no guarantee that any viruses or threats are detected or removed.

8. Termination

• We may suspend or terminate your access for violations (e.g., clear illegal activities), with or without notice. We also reserve the right to remove specific content, suspend accounts, or take other actions at our discretion if we encounter content we deem inappropriate or unlawful during routine operations (e.g., server maintenance). We may revoke API keys for abuse or violations.
• Upon termination, your right to use the Service ends, and any remaining tokens are forfeited. We may retain your data as needed for legal/compliance purposes.

9. Disclaimers and Limitations of Liability

• The Service is provided "as is" without warranties. We disclaim all implied warranties (e.g., merchantability, fitness for purpose). We do not monitor, control, or take responsibility for any user or AI-generated content, including any errors, biases, legal issues, or third-party claims arising from it. Our scanning for malware is provided as a courtesy and is not foolproof; you assume all risks related to viruses, malware, or other threats in uploads or generated content. Rate limits and safeguards are for operational purposes only and do not guarantee prevention of token overuse, data loss, or other harms from your automation or errors.
• To the fullest extent permitted by law, we are not liable for indirect, incidental, or consequential damages (e.g., data loss, poor-quality generations, lost tokens from API misuse, or claims related to your content). Our total liability is limited to the value of tokens purchased in the last 12 months.
• You agree to indemnify and hold us harmless against any claims, damages, or expenses arising from your use of the Service, including but not limited to violations of law, IP infringement, or misuse of generated content or API.

10. Governing Law and Disputes

• These Terms are governed by the laws of Montana, USA, without regard to conflict of laws.
• Any disputes will be resolved exclusively in Montana courts. You waive jury trials and class actions.

11. Changes to Terms

• We may update these Terms at any time (e.g., to reflect token pricing changes). Continued use after changes constitutes acceptance. We will notify you via the Site or email.

12. Contact Us

• Questions? Email slockhartbiz@gmail.com or use the /contact endpoint on the Site.

By using the Service, you acknowledge that you have read, understood, and agree to these Terms.

Privacy Policy for SpnLabs

Effective Date: November 19, 2025

SpnLabs ("we," "us," or "our") operates the SpnLabs service (the "Service"), accessible via spnlabs.com (the "Site"). We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use the Service, including any mobile applications.

This Privacy Policy is incorporated into and forms part of our Terms of Service ("Terms"). By using the Service, you consent to the practices described here. If you do not agree, please do not use the Service.

We are based in Montana, USA, and operate under Montana and applicable U.S. laws. For users outside the U.S., your information may be transferred to and processed in the U.S., where privacy protections may differ from your home country.

1. Information We Collect

We collect information to provide, improve, and secure the Service. This includes:

Personal Information

• Account Information: When you create an account, we collect your email address and any other details you provide (e.g., name, if optional). For OAuth sign-ins (e.g., Google as our current provider, with Apple or similar providers planned for future mobile support), we receive and store limited profile information such as your email, user ID, and profile picture (as permitted by the provider's terms). We do not store full OAuth credentials (e.g., passwords); instead, we use secure tokens for authentication.
• Payment Information: When you purchase tokens, we collect billing details (e.g., credit card info) via our third-party processor, Stripe. We do not store full payment card details on our servers—Stripe handles this securely and complies with PCI DSS standards.
• Communications: If you contact us (e.g., via support email at slockhartbiz@gmail.com or the /contact endpoint), we collect your email, message content, and any attached files.

Usage and Technical Information

• Log Data: Automatically collected details about your interactions, including IP address, browser type, device information, operating system, session duration, pages viewed, and timestamps. This helps with functionality, analytics, and fraud detection.
• Token and Activity Logs: Records of your token purchases, usage (e.g., generations, API calls, storage), and feature interactions to manage your account balance and prevent abuse.
• Cookies and Similar Technologies: See Section 6 for details. We use only first-party cookies for essential functions and user preferences.

Content and Generated Data

• User Content: Prompts, uploaded files (e.g., for processing), and metadata about generated outputs (e.g., image/video descriptions, timestamps). You own this content, but we process and store it temporarily for service delivery (e.g., generation, storage features).
• AI-Generated Outputs: Files you generate (e.g., images/videos) are stored in your account until you download or delete them. We may retain anonymized metadata (e.g., prompt types, success rates) for improving the Service.

We do not collect sensitive personal information (e.g., health data, political views) unless you voluntarily provide it in communications, in which case we treat it with extra care.

2. How We Use Your Information

We use collected information for:

• Providing the Service: Authenticating accounts (via email/OAuth), processing token purchases (via Stripe), generating content, handling API requests, and managing storage.
• Improving and Personalizing: Analyzing usage patterns to enhance features (e.g., better AI models), troubleshoot issues, and develop new functionalities. This includes using anonymized user content and metadata for training and improving AI models, as described in our Terms. Future internal analytics will be handled solely by SpnLabs.
• Communications: Sending transactional emails (e.g., purchase confirmations, refund notifications) or responses to your support inquiries. We may send occasional service updates or policy changes if you have an account.
• Security and Fraud Prevention: Monitoring for suspicious activity (e.g., via IP logs, token usage patterns), scanning uploads/outputs for malware (e.g., using ClamAV), and complying with legal obligations.
• Analytics and Business Purposes: Aggregating anonymized data for internal metrics (e.g., usage trends) to operate and grow the business. We do not sell your personal information.

3. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information. We may share it in limited circumstances:

• Service Providers: With trusted third parties who help operate the Service, such as:
  • Stripe for payments.
  • OAuth providers (e.g., Google, Apple) for authentication—limited to what's necessary.
  • AI and media processing providers (e.g., for generation or FFmpeg features) to deliver outputs; they may process your prompts/content but are bound by data processing agreements.
  • Hosting/cloud services (e.g., for storage).
    These parties are contractually required to use your information only for the specified purposes and protect it. No automated transfers to non-EU countries without appropriate safeguards.
• Legal and Safety: If required by law, subpoena, or government request; to enforce our Terms; to protect rights, property, or safety (e.g., reporting illegal content); or in connection with a merger, acquisition, or sale of assets.
• With Your Consent: If you explicitly agree (e.g., sharing features in future updates).

We do not share user content or generated outputs with third parties except as needed for service delivery (e.g., to AI providers) or as described above. Anonymized, aggregated data may be shared for research or marketing (e.g., "X% of users generate images").

4. GDPR Compliance for EU/EEA Users

If you are in the EU/EEA, we process your personal data in accordance with GDPR. Our lawful bases for processing include:

• Contract: For providing the Service (e.g., account management, token processing).
• Legitimate Interests: For security, fraud prevention, and internal analytics (balanced against your rights).
• Consent: For non-essential communications (e.g., updates); you can withdraw via email.

We do not rely on consent for core functions. For AI training, we use only anonymized data under legitimate interests. EU users have enhanced rights (see Section 8). Data is processed in the U.S.; we use Standard Contractual Clauses (SCCs) approved by the European Commission for transfers, ensuring equivalent protection.

5. International Transfers

If you are outside the U.S., your information may be transferred to Montana or other U.S. locations for processing. We ensure appropriate safeguards (e.g., standard contractual clauses for EU data where applicable), but note that U.S. privacy laws may offer different protections.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information (e.g., encryption for data in transit, access controls, regular security audits). However, no system is completely secure—we cannot guarantee absolute protection against breaches, and you use the Service at your own risk. In the event of a data incident, we will notify affected users and authorities as required by law.

For stored files (uploaded or generated), we use secure storage but may delete them at any time for operational reasons (e.g., storage limits), as noted in our Terms. Malware scanning is performed where feasible, but we make no guarantees.

7. Cookies and Tracking Technologies

We use only first-party cookies (set by our domain) and similar technologies (e.g., local storage) for essential functions and user preferences. These include:

• Essential Cookies: For core functions like login, session management, and authentication.
• Preferences Cookies: To remember settings (e.g., language, theme).

We do not use third-party cookies or external analytics tools. All analytics, when implemented, will be handled internally by SpnLabs using anonymized data. You can manage cookies via your browser settings (e.g., clear or block them). Disabling essential cookies may limit Service functionality. We do not respond to "Do Not Track" signals yet but respect opt-outs where available. For more, contact us.

8. Data Retention and Deletion

• Personal Information: Retained as long as needed for the purposes above (e.g., account data while active; payment logs for 7 years for tax/compliance).
• Usage Logs: Kept for up to 2 years for security/analytics, then anonymized or deleted.
• User Content: Stored until you delete it or your account is terminated; backups may persist for a short period. Upon request, we will delete your account and associated data (subject to legal holds).
• AI Training Data: Anonymized data used for model improvements may be retained indefinitely, but identifiable info is not.

To request deletion, email slockhartbiz@gmail.com. We comply with applicable laws (e.g., no "right to be forgotten" under Montana law, but we'll honor reasonable requests).

9. Your Rights and Choices

Depending on your location, including enhanced GDPR rights for EU/EEA users:

• Access/Update: Log in to view/edit your account info (e.g., email, token balance). For other data, contact us.
• Opt-Out: Unsubscribe from non-essential emails via links. For OAuth, disconnect via the provider's settings.
• Objection/Deletion: Request access, correction, or deletion of your data (we'll respond within 30 days, subject to exemptions). EU/EEA users have additional rights: portability (structured data export), erasure ("right to be forgotten," subject to legal obligations), objection to processing (e.g., analytics—we'll cease unless compelling reasons), and withdrawal of consent.
• No automated decision-making (e.g., profiling) that significantly affects you.

For California residents: We do not sell data, so no CCPA "Do Not Sell" rights apply. See our Terms for more.

10. Children's Privacy

The Service is intended for adults only and requires users to be at least 18 years old, as stated in our Terms of Service. We do not knowingly collect personal information from minors under 18. If we learn that we have collected data from a minor, we will delete it promptly. Parents or guardians who believe their child under 18 has provided us with information should contact us at slockhartbiz@gmail.com.

11. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices or laws. We'll notify you via the Site, email, or in-app notice for material changes. Continued use after updates constitutes acceptance. Check this page periodically.

12. Contact Us

Questions about this Policy? Email slockhartbiz@gmail.com. For EU/UK users, our data protection representative can be reached at the same address.

By using the Service, you acknowledge this Policy.