gleon

Privacy policy

Last updated: 18 October 2026

Gleon is run by Gleon ("we"). This policy explains what we collect, why, and your choices.

What the product does

Gleon is an image generation studio. You describe the marketing images you want, add your brand kit, and we create, edit and download the images for you. Your brand kit and images are kept in your account.

Information about you, our customer

  • Account: your email address and the country you sign in from (to apply our country rules).
  • Creative discussions: your messages, the directions and answers we show, and the notes you save, so you can come back to them. You can delete any discussion.
  • Your brand kit: the details you add for each brand or workspace (name, industry, description, goals, website, competitors and guidance) and the brand images you upload (logos, products, references). We keep them so images fit your brand. You can edit or delete them at any time.
  • Images: the images you create and edit, and the prompts and references used to make them. You can download or delete them.
  • Contact form: if you write to us, your email, the optional name you give and your message, kept while we handle your request. Ask us to delete it any time.
  • Technical: a session cookie that keeps you signed in. We do not use advertising or tracking cookies. See "Cookies, local storage and sessions" below.

Information collected automatically

When you use Gleon, our servers record your IP address, the country it comes from, your browser and device type, the pages and features you use and the time. We use this to keep the service secure, stop abuse, apply our country rules and limits, find faults and see how much the service is used. We do not use it for advertising and do not build profiles of you.

Information we get from other sources

If you choose "Continue with Google", Google tells us your email address and that you signed in; we never see your Google password. We do not buy personal data and we do not collect it from social media about you.

How we use your email

We use your email address to sign you in, to reply to you and to send messages about your account or payments. We do not send marketing email or sell your address.

Payments

Paid plans are processed by our payment provider. We never see or store your card number; we receive only the confirmation of payment and the plan you bought.

How we use AI

We use AI to talk with you about your ideas, to write image directions, captions and prompts, and to create and edit images. Each provider receives only what that step needs:

  • Creative discussion and directions: Anthropic's Claude Haiku receives your messages, your brand kit details and notes, and up to three brand images you select.
  • Image creation and editing: OpenAI (GPT Image) or Meta (Muse Image) receives your image description, your brand guidance, the brand images you select, and any image you are editing.
  • Fill from website: if you use it, we fetch the public homepage address you enter and send its text to Anthropic to suggest brand details. Nothing is saved until you press Save.

Generated lettering, logos and claims can be imperfect, so review every image and its text before you use it. Each provider's own terms say how it uses API inputs; check them for training use. We do not train our own models on your data.

Who processes data for us

  • Google Cloud (hosting and database) in the United States, and Google (the "Continue with Google" sign-in).
  • Cloudflare (website security and proxy, private storage for brand files and images, and anti-bot checks on sign-in).
  • Anthropic (Claude Haiku: creative discussion and "Fill from website").
  • OpenAI (GPT Image creation and editing).
  • Meta (Muse Image creation and editing).
  • Resend (email delivery) to send sign-in emails.
  • Our payment provider, which processes paid plans as merchant of record.

How long we keep it

Your account, brand kit, brand images, discussions and images you create: until you delete them or your account. Deleting a discussion removes its messages and keeps its images in your Library. When you delete an image, its picture is removed, but a record that the creation happened (with no personal identifier) is kept so daily limits still work. Draft text and selections may also be kept in your browser. Sign-in links expire after 15 minutes. Data you delete can remain in our daily backups for up to 30 days before they are removed.

How we protect your information

Gleon is served over HTTPS, access to our servers and databases is limited to the people who run the service, sign-in sessions expire, and we limit how often requests can be made to prevent abuse. No system is completely secure, so we cannot promise absolute security. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

Where your data is kept

Your data is stored in the United States: Google Cloud holds our servers and database, and Cloudflare holds private brand files and images. The providers listed above may process it in the United States and other countries where they operate. By using Gleon you accept that your information is transferred to and processed in these countries.

Your choices and rights

You can delete any discussion or image, edit or clear your brand kit, delete a brand workspace, or delete your whole account, in Settings. Deleting your account removes your email, country, sessions, discussions, brand kit, brand images and generated images. Under India's Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your data, and raise a grievance with our Grievance Officer: Manoj, privacy@gleon.app.

Where we operate

Gleon is not offered in the European Union, EEA, United Kingdom or Switzerland.

Cookies, local storage and sessions

  • Cookies and sessions: a session cookie keeps you signed in for up to 30 days, and a short-lived cookie protects the Google sign-in step. They are needed for the service to work and contain no personal details.
  • Local storage: your browser stores small settings, such as a question you typed before signing in, so it is still there afterwards. It stays on your device.
  • We use no advertising, remarketing or analytics cookies and no tracking pixels. You can block cookies in your browser, but then you cannot stay signed in.

California residents

If you live in California you can ask us what personal information we hold about you, ask us to delete it, and ask us to correct it, and we will not treat you differently for doing so. We do not sell personal information and do not share it for advertising. Email support@gleon.app; we reply within one month.

Do Not Track

We do not track you across other websites, so a Do Not Track signal from your browser changes nothing in how Gleon works.

Links to other websites

Gleon links to other sites we do not run. This policy does not cover them; read their own policies.

If our business changes

If Gleon is sold, merged or transferred, your information may move to the new owner, who must keep to this policy or tell you before changing it.

Your consent and governing law

By using Gleon or signing in you agree to this policy. It is governed by the laws of India.

Changes to this policy

If we change this policy we will update the date at the top and, for changes that matter, tell you inside Gleon before they apply. If you disagree, you can delete your account.

Children

Gleon is a business tool and not meant for anyone under 18.

Contact

support@gleon.app, or use the contact form.

FAQ · Privacy policy · Terms and conditions · Refunds · Contact us · Delete your data