Privacy Policy
Last updated: [DATE] · Placeholder text — have your legal counsel review before publishing
1.Data controller
[Company legal name], [address], is the controller of personal data processed through this website. Contact: [email protected].
2.What we collect and why
- Order data — email address, order details, payment status. Legal basis: performance of a contract. Payment card data is handled entirely by our payment processors and never touches our servers.
- Uploaded images — the photo you provide as a source for generation. Legal basis: performance of a contract. Used exclusively to generate your artwork.
- Prompts and settings — the style and text you choose, stored with your order so we can fulfil revisions.
- Technical data — IP address, browser type, and cookies necessary for the shop to function (cart, checkout, fraud prevention). Legal basis: legitimate interest / consent for non-essential cookies.
3.What we do NOT do
- We do not use your uploaded photos or generated images to train AI models.
- We do not sell or share your personal data with advertisers.
- We do not publish your images anywhere without your explicit opt-in.
4.Retention and deletion
Uploaded source images and generated artwork are stored encrypted and automatically deleted 30 days after delivery. Order records (without images) are kept as long as required by tax and accounting law. You can request earlier deletion of your images at any time.
5.Processors and transfers
To provide the service we use carefully selected processors under data processing agreements: hosting provider [name], payment providers [names], email delivery [name], and AI image generation API [name]. Where a processor is located outside the EEA, transfers are protected by EU Standard Contractual Clauses or an adequacy decision.
6.Secure download links
If you choose link delivery, your image is available through a unique, unguessable URL that expires after [X] days. Links are not listed or indexed. Anyone you forward the link to can download the image while it is valid, so treat it like the file itself.
7.Your rights
Under the GDPR (and equivalent laws) you have the right to access, rectify, delete and export your data, to restrict or object to processing, and to withdraw consent at any time. Write to [email protected] — we respond within 30 days. You may also lodge a complaint with your local supervisory authority.
8.Cookies
Essential cookies (cart, session, security) are always active. Analytics and marketing cookies are used only with your consent, which you can change anytime via the cookie settings link in the footer. [Configure your consent banner plugin accordingly.]
9.Changes
We will post any changes to this policy on this page and, for material changes, notify you by email if we hold your address.