Privacy Policy
Last updated: [DATE — set on publication]
What we collect
- Account data: email address, optional name, hashed password, sign-up IP address, login timestamps.
- Product images you upload and the photos you generate, plus the settings you chose (style, scene, aspect ratio, instructions).
- Billing data: purchases are processed by Stripe. We receive the pack, amount, Stripe session/payment identifiers and your email — never your full card number.
- Usage and security logs: request logs, errors and rate-limit events.
How we use it
- To provide the Service: store your products, generate and deliver photos, maintain your credit balance.
- To send service emails (confirmation, welcome, purchase confirmation, failed-generation notices, support replies).
- To prevent abuse (e.g. free-credit farming) and keep the Service secure.
[LEGAL REVIEW: lawful bases (GDPR Art. 6) for each purpose]
AI processing and third parties
When you generate a photo, your uploaded product image and the scene description are sent to a third-party AI image provider (currently: Stability AI and/or Replicate, depending on configuration) for processing. We also use Stripe (payments) and an email delivery provider (SMTP). These providers process data on our behalf under their own terms. [LEGAL REVIEW: list processors, data-processing agreements, international transfers, whether providers retain or train on inputs]
Storage and retention
- Uploaded products and generated photos are stored on our servers until you delete them, or until your account is deleted.
- Deleting a photo or product removes the image files from our storage. Backups are rotated and expire within the backup retention period (currently up to 14 days).
- Credit and payment records are kept for accounting and legal obligations even after images are deleted. [LEGAL REVIEW: statutory retention periods]
Your rights
You can access, correct or delete your data, and object to certain processing. Contact support@example.com. [LEGAL REVIEW: jurisdiction-specific rights, supervisory authority, response timelines]
Cookies
We use only essential cookies: a session cookie to keep you logged in and a security (CSRF) cookie. We do not use advertising cookies.
Contact
[Company legal name — REQUIRED before launch] · support@example.com