Privacy Policy

Introduction

Nano Banana 2 ("Nano Banana 2", "we", "us") is an independent AI workspace that connects to Google Gemini 2.5 Flash Image (Nano Banana) to deliver text-to-image, image-to-image, and inpainting workflows. We are not affiliated with Google. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website, access the Nano Banana 2 application, or otherwise interact with us.

Who We Are

Nano Banana 2 is developed by our team focused on building responsible creative tooling. Contact us anytime at [email protected].

Information We Collect

We only gather the information required to deliver, secure, and improve Nano Banana 2:

Account & Identity Data – Name, email, workspace name, authentication IDs, and role permissions supplied when registering or being invited to a workspace.
Creative Workspace Content – Prompts, reference boards, uploaded media, renders, captions, and annotations created inside Nano Banana 2.
Billing & Transaction Data – Subscription tier, invoices, payment method tokens, and tax information processed by payment partners such as Stripe (we never store full card numbers).
Usage & Device Data – Log files, IP address, browser type, session metadata, device identifiers, and telemetry used to maintain uptime and improve workflows.
Support Communications – Messages, attachments, survey responses, and troubleshooting notes shared via email, chat, or in-product forms.

How We Use Your Data

We process collected information to:

Provide secure access to Nano Banana 2 and manage workspace settings.
Generate AI imagery according to the prompts, references, and parameters you supply.
Deliver onboarding guidance, service alerts, billing notices, and product updates related to your account.
Monitor service health, detect abuse, and defend against malicious activity.
Conduct product research, aggregate usage trends, and prioritize roadmap decisions.
Provide customer support, respond to legal or compliance requests, and enforce policies.

Legal Bases for Processing

Where laws such as the GDPR or UK Data Protection Act apply, we rely on contractual necessity, legitimate interest, compliance with legal obligations, and—when required—your consent to process personal data.

Data Retention

We retain personal data for as long as your Nano Banana 2 workspace remains active or as needed to deliver requested services. When you close an account, we delete or anonymize associated data within a reasonable period unless retention is required for legal, billing, or security purposes.

We share information with vetted subprocessors that help operate Nano Banana 2 (for example, cloud hosting, compute partners that run Gemini model inference, email delivery providers, and billing processors). Each partner is bound by confidentiality and data protection obligations. We may disclose information to law enforcement or regulators when legally compelled or to protect our rights, users, or the public.

International Data Transfers

Nano Banana 2 operates from the United States and may transfer data to other countries where subprocessors maintain infrastructure. When data crosses borders, we rely on Standard Contractual Clauses or equivalent safeguards to protect your information.

Security

We apply layered security controls—including encryption in transit, role-based access, network segmentation, audit logging, and regular vulnerability assessments—to protect personal data and creative assets. No system is entirely risk-free, so please contact us immediately if you suspect unauthorized access.

Your Rights & Choices

Depending on your jurisdiction, you may have rights to access, correct, download, or delete personal data and to object to certain processing. Workspace owners can manage many of these actions directly inside Nano Banana 2. For additional requests, email [email protected] and we will respond within the timelines required by applicable law.