Sloosh Privacy Policy

Last Updated: 15th October 2026

HOM.AI PTE. LTD. ("HOM.AI", "we", "us", "our"), a company incorporated in Singapore with its registered office at 20 Collyer Quay, #18-03, Singapore 049319, operates Sloosh, an AI-powered image and video generation service available at sloosh.ai and related sub-domains and applications (the "Service").

This Privacy Policy explains what personal data we collect when you visit our website or use the Service, how we use it, who we share it with, how long we keep it, and the choices and rights you have. It should be read together with the Sloosh Terms of Service. Capitalised terms not defined here have the meanings given in the Terms of Service.

Sloosh is a ShopOS product, operated by HOM.AI. This Policy applies to Sloosh. Other ShopOS services have their own privacy policies.

HOM.AI is responsible for the personal data processed through the Service. This Policy applies to all users and visitors of the Service, wherever they are located. By accessing or using the Service, you acknowledge that your personal data will be collected, used and shared as described in this Policy.

1. Information We Collect

a. Account Data

Your name and email address, and your password if you set one (stored only in hashed form). If you sign in with Google, we receive your name, email address, profile picture and Google account identifier as shared by Google. We also hold your company name (if provided), your Workspace memberships and your role in each Workspace.

b. Billing Data

Your plan, Credit balance, purchase and invoice history, billing name and address, and tax identification number (if provided). Payments are processed by Stripe. We do not receive or store your full payment card number.

c. Inputs

Prompts, instructions, reference images, videos, files and URLs you submit to generate or edit content. Inputs may include images of people, including their faces.

d. Outputs

Images, videos and other content generated through the Service, together with the generation settings, the AI model used and timestamps. Outputs may contain or depict personal data depending on your Inputs.

e. Shared and Published Content

When you create a Share Link or publish a template, Space or canvas, the content you share or publish, including its prompts, settings and Inputs, and any information shown with it. Published templates and community Spaces show your first name.

f. Usage and Device Data

IP address, approximate location derived from your IP address (country or region), browser and device type, operating system, pages viewed and features used, session duration, how you arrived at the Service (referral, campaign and share-link information, subject to Section 8), Credit consumption, and error and crash reports.

g. Session Recordings

Where permitted under Section 8, recordings of how you interact with the Service, such as clicks, scrolling, navigation and the content displayed on screen.

h. Communications

Support requests, feedback, survey responses and other messages you send us.

i. Cookies and Similar Technologies

See Section 8.

j. Connected Agents

If you connect an AI agent or application (such as Claude, ChatGPT or Cursor) to your account, including through the Sloosh MCP connection, we store the connection details (such as the application's name, access tokens, permissions granted and connection dates), the daily Credit limit you set, and a record of the actions and Credit spending it carries out through your account.

k. Face Identity Features

Some features, such as AI Influencer, create and keep a reusable identity of a person's face from images you upload, so that the person looks consistent across generations. We use it only to provide that feature to you. We do not sell it, and we do not use it to identify anyone. We delete it when you delete that feature profile or your account, and in any case within 3 years of its last use. By uploading images to create one, you confirm that you, and every person whose face is used, consent to this.

We do not ask for, and you should not submit, sensitive personal data such as government identification numbers, financial account details or health information. Our analytics events do not contain your email address, name, prompt text or other free text you type, and search terms are cleaned before they are recorded.

2. How We Use Your Information

We use personal data to:

• create and manage your account and Workspaces, authenticate you, process your Inputs, deliver Outputs, store your content and host Share Links;
• send Inputs to AI Model Providers to generate Outputs (Section 3);
• process payments, manage Credits and keep billing records;
• detect, investigate and prevent abuse, illegal content, fraud and security incidents, and enforce our Terms of Service (Section 4);
• understand how the Service is used and improve it, including through analytics and Session Recordings (Section 8);
• measure the effectiveness of our advertising on Google and Meta (Section 8);
• monitor and fix errors and performance problems;
• send service communications, such as security notices, billing messages and changes to the Service or our terms;
• send product updates and marketing emails (where the law requires it, only with your consent), which you can unsubscribe from at any time; and
• comply with law, respond to lawful requests, and establish, exercise or defend legal claims.

Where applicable law requires a legal basis for processing, we rely on one or more of the following: performance of our contract with you; our legitimate interests in operating, securing, improving and promoting the Service; compliance with legal obligations; and your consent, where the law requires consent (for example, for certain cookies, as described in Section 8).

HOM.AI does not use your Inputs or Outputs to train its own AI models. We may use aggregated or de-identified information that does not identify you to understand usage trends and improve the Service.

3. AI Model Providers and Model Training

Sloosh is built on a combination of third-party AI models ("AI Model Providers"). When you generate content, your Inputs (and, where needed to complete the request, Outputs) are sent to the AI Model Provider that powers the feature or model you use, which processes them to return the Output to you.

• AI Model Providers process Inputs and Outputs under their own terms and policies. Depending on the provider and model, data may be processed only to return the Output, may be retained for a limited period (for example, for abuse monitoring), or may be used by that provider to improve its models.
• These practices are set by each provider, may change from time to time and are outside HOM.AI's control. HOM.AI is not responsible for how AI Model Providers use data under their own terms.
• AI Model Providers may process data in the United States and other countries (see Section 7).
• A list of the AI Model Providers we currently use is available on request at support@sloosh.ai.

If you do not want your content to be processed by third-party AI Model Providers on this basis, please do not submit it to the Service.

4. Review of Content and Sessions for Safety

To protect users, the public and the Service, we may review Inputs, Outputs, Shared Content, account activity and Session Recordings, using automated tools and, where needed, authorised members of our team. We do this to detect and investigate abuse, illegal content, fraud, security incidents and breaches of our Terms of Service.

• We do not routinely monitor all content and we are not obliged to do so.
• Human review is limited to authorised personnel who need access for these purposes.
• Session Recordings are only made where permitted under Section 8.
• Automated tools may block a generation request that appears to break our Terms. If you believe this was a mistake, contact support@sloosh.ai and a person will review it.
• Where we find a breach, we may remove content, disable Share Links, or suspend or close accounts. Where the law requires it, we report illegal content to the relevant authorities.

5. How We Share Your Information

We do not sell your personal data. We share personal data only as described below.

AI Model Providers

As described in Section 3.

Service Providers

Companies that help us run the Service, including hosting and infrastructure providers (such as Vercel, and Amazon Web Services for storage and content delivery in India), authentication (Clerk), background job processing (Trigger.dev), email delivery, customer support, analytics (Google Analytics and PostHog), advertising measurement (Meta), error monitoring (Sentry), bot protection on sign-in (Cloudflare) and security tools. They may use personal data only to provide services to us and are bound by contractual confidentiality and data protection obligations.

Payment Processor

Stripe processes payments on our behalf. Stripe's handling of your payment information is governed by Stripe's own privacy policy.

Google Sign-In

If you choose to sign in with Google, Google's privacy policy applies to the information Google processes.

Image Search

When you search for stock images inside the Service, your search terms are sent to Unsplash to return results. Unsplash's privacy policy applies to that search.

Connected Agents

When you connect an AI agent or application, we exchange data with it as you authorise, including Content and Outputs it requests. Its provider's privacy policy applies to what it does with that data.

People You Share With and the Public

Anyone who has a Share Link can view the shared content without signing in, and they may forward or post the link. Do not share content you want to keep private. If you delete the Output (or disable the Share Link, where that option is available), the shared page will stop being available through the Service, but we cannot control copies others have already made.

Published Content (such as templates and community Spaces) is visible to all users of the Service with your first name, and other users can recreate and remix it, including the Inputs you published with it. We may also feature it in the Service and our marketing. If you unpublish it, it stops being shown, but we cannot recall Outputs others have already made from it.

Workspace Owners and Members

Members of a shared Workspace can see content created in that Workspace. The Workspace owner and administrators can access, manage and delete Workspace content, manage members and view member activity in the Workspace.

Group Companies

Companies in the HOM.AI group, including SI House of Models Private Limited (India), which provide engineering, support and operational services for the Service under HOM.AI's instructions.

Legal Authorities

Where required by applicable law, court order or a governmental authority, or where we reasonably believe disclosure is necessary to protect our rights, our users, or the safety of others.

Business Transfers

In a merger, acquisition, financing or sale of all or part of our business, personal data may be transferred to the acquiring or successor entity. We will notify you by email or a prominent notice on the Service before your personal data becomes subject to a materially different privacy policy.

With Your Consent

In any other case where you have asked us to or agreed to it.

A list of our sub-processors is available on request at support@sloosh.ai.

6. Data Retention

We keep personal data only for as long as needed for the purposes in this Policy:

• Account Data: while your account is active. After you close your account, we delete or de-identify it within a reasonable period, except where we must keep it longer by law.
• Inputs, Outputs and Shared Content: until you delete them or close your account. Deleted content may remain in backups for a limited period before it is overwritten.
• Data held by AI Model Providers: in accordance with each provider's own terms (Section 3).
• Billing records: for the period required by applicable tax and accounting laws (for example, Singapore law).
• Your cookie choice: 180 days (Section 8).
• Safety and abuse records: for as long as needed to investigate, enforce our Terms, resolve disputes and prevent repeat abuse.
• Analytics data: in accordance with the retention settings we configure with our analytics providers.

To request deletion of specific data, email support@sloosh.ai. We will confirm when deletion is complete. Some data may be kept where required by law or for legitimate purposes such as fraud prevention, dispute resolution and legal compliance.

7. International Data Transfers

HOM.AI is based in Singapore. Personal data processed through the Service is stored on servers in the United States and India, may be accessed by our team in Singapore and India, and may be processed by AI Model Providers and service providers in other countries. These countries may have data protection laws that differ from those where you live.

Where applicable law restricts international transfers of personal data, we rely on the safeguards permitted by that law, such as standard contractual clauses, and take steps to ensure that recipients protect personal data to the standard that law requires.

8. Cookies, Analytics and Your Consent Choices

8.1 What we use

• Strictly necessary: cookies and local storage that keep you signed in, keep the Service secure and remember your cookie choice. These are always on.
• Analytics: Google Analytics 4 and PostHog, which help us understand how the Service is used. PostHog also provides Session Recordings.
• Error monitoring: Sentry, which tells us when something breaks (Section 8.6).
• Advertising measurement: the Meta Pixel (Section 8.2).

We use the Meta Pixel to measure our advertising on Facebook and Instagram, only where no consent is required or after you Accept, and never when your browser sends Do Not Track or Global Privacy Control. We use Google ad click identifiers only as described below.

8.2 Where we ask for your choice

In some locations, including where we cannot determine your location, we show a cookie banner and ask for your choice before using analytics. Until you make a choice:

• We do not set analytics cookies, do not start PostHog, do not record your session, do not identify you, and do not store information about how you arrived at the Service, and do not load the Meta Pixel.
• Google Analytics receives limited signals in "consent denied" mode without cookies: that the banner was shown, your general region, and the page address with campaign parameters and referral and share codes removed. Google's own ad click identifiers (gclid, gbraid and wbraid) are kept in these signals so that Google can model ad conversions in aggregate (Google Consent Mode). These signals do not use cookies and are not linked to your account.
• Events about what you do on the page are held in your browser and sent only after you choose, in the mode you choose.

If you Accept: we use analytics cookies; PostHog analytics are linked to your account and Workspace; a sample of sessions may be recorded; Google Analytics runs with cookies; and we store information about how you arrived (such as campaign, referral or share-link details); and the Meta Pixel runs.

If you Reject:

• No analytics cookies are set, the Meta Pixel does not load and no session is recorded.
• You are not identified, and nothing is linked to your account or Workspace.
• PostHog counts visits and actions anonymously, without cookies and without identifying you.
• Google Analytics continues only in the cookieless "consent denied" mode described above.
• Any information already stored about how you arrived at the Service is deleted, from your browser and from our servers.

8.3 Changing your choice

If you were shown the cookie banner, you can change your choice at any time using the Cookie settings link in the website footer, the mobile menu or the Settings sidebar. A change takes effect immediately, without reloading, in all your open tabs. If you switch from Accept to Reject, Google Analytics cookies are expired, analytics identifiers are reset, Session Recording stops, the Meta Pixel stops and stored arrival information is deleted. Your choice is remembered for 180 days, after which we will ask you again.

8.4 Where no banner is shown

In other locations, we do not show a cookie banner. Analytics, including Google Analytics cookies, PostHog and Session Recordings, and the Meta Pixel, run by default. You can opt out by enabling Do Not Track or Global Privacy Control (Section 8.5), or by blocking or deleting cookies in your browser settings.

8.5 Do Not Track and Global Privacy Control

If your browser sends a Do Not Track or Global Privacy Control signal, we turn off Google Analytics, PostHog entirely (including anonymous counting), Session Recording and the Meta Pixel, wherever you are located.

8.6 Error monitoring

Sentry receives technical information when an error occurs, such as browser and device details, the page address and the error itself. We take steps to remove campaign parameters, referral and share codes, and click identifiers from page addresses and referrers sent to Sentry. Error reports may include your account identifier to help us fix problems, except where your browser sends Do Not Track or Global Privacy Control. Error monitoring is not controlled by the cookie banner because it is needed to operate the Service reliably.

9. Security

We use technical and organisational measures designed to protect personal data, including encryption in transit and at rest, hashed passwords, access controls limiting data to authorised personnel, and ongoing security monitoring. No system is completely secure. If a security incident affects your personal data, we will notify you and the relevant authorities as required by applicable law.

10. Your Rights

Depending on the law that applies to you, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data (Section 6);
• object to, or ask us to restrict, certain processing;
• receive your data in a portable format;
• withdraw consent at any time, including through Cookie settings, without affecting processing that took place before; and
• opt out of marketing emails using the unsubscribe link.

You may also have the right to complain to the data protection authority where you live. We would appreciate the chance to address your concern first.

We do not sell personal data, and we will not discriminate against you for exercising your rights. Where the law allows, you may use an authorised agent to make a request, and you may nominate another person to exercise your rights if you die or become incapacitated.

To exercise any right, email support@sloosh.ai. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law. Where the law gives you a right to appeal our decision on a request, you can appeal by replying to our decision.

11. People Shown in Uploaded or Generated Content

Users are responsible for having the rights and consents needed for any image of a person they upload (see our Terms of Service). We do not verify these consents. If you believe an image of you has been uploaded to, or generated with, the Service without your permission, email support@sloosh.ai with the relevant link or details. We will review your request and remove the content where appropriate. If the content is an intimate image shared without consent, we will remove it within 48 hours of receiving a valid request.

12. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from minors as users. If you believe a minor has provided us with personal data, contact support@sloosh.ai and we will take steps to delete it.

13. Third-Party Links and Services

The Service may link to or integrate with third-party websites and services. We are not responsible for their privacy practices and encourage you to read their privacy policies.

14. Changes to This Policy

We may update this Policy from time to time. We will change the "Last Updated" date at the top, and for material changes we will notify you by email or through a prominent notice on the Service before the change takes effect.

15. Contact Us

For privacy questions, rights requests, deletion requests or complaints:

Email: support@sloosh.ai (Attention: Data Protection Officer)

Grievance Officer: Manish Kumar Mishra, Engineering Lead, support@sloosh.ai

Company: HOM.AI PTE. LTD.

Address: 20 Collyer Quay, #18-03, Singapore 049319