Privacy

This page says what we keep, why we keep it, and how to get rid of it. It is written to be read once, not skimmed for a loophole.

Draft legal text. Bracketed fields are placeholders and have to be filled by counsel before this page goes live.

1. What we collect

We collect three kinds of information, and only one of them is about your photos.

Account details

• Email address, and a hashed password if you sign up with one.
• If you sign in with Google, the name, email and profile picture Google sends us. Nothing else from that account.
• Billing country, because tax depends on it.

Payment records

• The last four digits of the card, the card brand, and the invoice address.
• The amount, currency and date of every charge, plus the credit balance after it.
• We never see or store the full card number. It goes straight to [payment provider].

Usage and technical data

• Which model ran, which settings were used, how long it took, and whether it failed.
• Browser and operating system, language, and a coarse location derived from your IP address.
• Error reports, which may include the page you were on when something broke.

2. What we do not collect

• No identity documents, no phone number, no home address.
• No access to your contacts, camera roll or files, beyond the file you choose to upload.
• No precise GPS location.
• No advertising identifiers, and no profile built from your behaviour on other sites.

3. Your images

Uploads and results are stored on object storage in [region, e.g. Frankfurt]. Access is limited to the account that created them and to the engineers who keep the service running, on a named-account basis.

How long we keep them

• Free: 7 days, then deleted automatically.
• Pro: 12 months, so your results stay where you left them.
• Studio: until you delete them, or until the account closes.

Training

We do not train models on customer uploads, and we do not pass them to third parties for training. The models run through inference providers that process the image to return a result and are contractually barred from retaining it.

Deleting early

You can delete any single image from its page, or everything from account settings. Deletion is immediate for the file; backup copies roll off within 30 days.

4. Cookies and analytics

We use two kinds of cookie, both small.

• Essential: keeps you signed in and remembers the language. These cannot be switched off without breaking the site.
• Analytics: a cookieless script that counts page views and records the browser type. It does not follow you to other sites and does not build a profile.

There are no advertising cookies, no social pixels and no cross-site trackers on this site.

5. Payments

Card payments are processed by [payment provider], which is PCI-DSS certified. We receive a confirmation, the amount, and the last four digits of the card. We do not receive the security code or the full number.

Invoices and credit notes are kept for seven years because tax law requires it, even after an account is closed.

6. Who else sees your data

We use a small number of companies to run the service. Each one sees only what it needs:

• Hosting and storage: [provider] in the EU.
• Content delivery: [CDN], for the site and thumbnails.
• Payments: [payment provider].
• Email: [email provider], for sign-in links and receipts.
• Error monitoring: [provider], which receives stack traces, not images.

We do not sell data, and we do not share it for advertising. If a government asks for data, we publish the request in our transparency note unless we are legally barred from doing so.

7. Your rights

Under the GDPR, and under similar laws elsewhere, you can ask us to:

• Show you everything we hold about you, in a readable file.
• Correct anything wrong.
• Delete your account and the files attached to it.
• Send your data to another service.
• Stop processing that is based on legitimate interest.

Write to [privacy email] and we answer within 30 days. If you think we handled it badly, you can complain to [data protection authority].

8. Children

The service is not for people under 16. We do not knowingly keep accounts for children, and we delete them when we find out.

9. Changes to this page

When this policy changes in a way that matters, we email account holders at least 14 days before the new version applies. The date at the top always shows the current version.

10. Contact

[legal entity], [registered address].
Privacy questions: [privacy email]. Everything else: [support email].