Decohere

GDPR overview

There is no GDPR implementation to report. Across every page collected, the words GDPR, CCPA, SOC 2, ISO 27001 and HIPAA do not appear once. No Article 27 EU representative is designated, no data protection officer is named, no Data Processing Agreement is offered and no subprocessor list is published. The privacy policy, effective 16 January 2023 and unchanged since, acknowledges that data may be transferred to and maintained on computers outside your state, province or country, and treats acceptance of the policy as agreement to that transfer, promising only unspecified adequate controls. Deletion of personal data is available on request by emailing support@decohere.co. The terms go no further, stating that both parties will negotiate additional data protection terms in good faith if needed, which means nothing is pre-agreed.

Who owns the data?

Ownership splits by plan. The terms say you own the Assets you create, but non-paying members receive only a Creative Commons BY-NC 4.0 licence, so Free and Explorer users hold no commercial rights. A full commercial licence, without attribution, begins at the Creator plan and applies retroactively to earlier creations. In return you grant Decoherence, Co. a perpetual, worldwide, non-exclusive, sublicensable, royalty-free and irrevocable licence over your prompts and your Assets. The company states it must obtain explicit written or electronic permission before exercising it, with two exceptions that need no permission: providing, maintaining and improving the Services or complying with law, and content you submit to public galleries.

Reuse rights

What you may do with your own output depends entirely on your plan. On the Free and Explorer tiers the licence is Creative Commons BY-NC 4.0: personal, non-commercial use with attribution, and no right to sell or monetise. From the Creator plan onward you own the images and videos outright and may use them for any commercial purpose without attribution, and upgrading extends that right retroactively to everything created earlier. Watermarks disappear from new generations only, never from media already produced. In the other direction, Decoherence, Co. may reuse prompts and Assets without asking again in two cases: to provide, maintain and improve the Services or to comply with law, and for anything you have opted to post to its public galleries or social channels.

Data retention & training

Hosting summary

Decohere discloses no hosting country and no hosting region. The privacy policy, effective 16 January 2023, states only that information is processed at the company's operating offices and in any other places where the parties involved in the processing are located, warning that data may be transferred to and maintained on computers outside your state, province or country, where data protection laws may differ. Acceptance of the policy is treated as consent to that transfer. The company commits in general terms that no transfer will occur unless adequate controls are in place, but names no mechanism: no standard contractual clauses, no adequacy decision, no framework. No subprocessor is identified. As a technical observation rather than a vendor statement, the domain's first A record resolves to 76.76.21.21, an anycast CDN address geolocated in the United States, and the publisher is based in Seattle according to its Y Combinator listing. Neither fact establishes where generated media or account data actually rest.