Privacy Policy

1. Introduction

AI Product Photography ("aiproduct.photography," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered product photography service.

This policy is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

By using our service, you consent to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address used for authentication via our magic link login system
• Profile Information: Business name, preferences, and settings you configure in your account
• Uploaded Images: Product photos you upload for AI processing
• Payment Information: When purchasing credits, payment is processed by third-party providers; we do not store full payment card details

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, generation history, and interaction patterns
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, referring URLs, and error logs

2.3 Generated Content

We store the AI-generated product photos created through our service, associated with your account for your access and management.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To process your images, generate AI photos, and provide our core service functionality
• Account Management: To create and manage your account, authenticate your identity, and maintain your preferences
• Communication: To send transactional emails (login links, generation notifications) and, with your consent, marketing communications
• Service Improvement: To analyze usage patterns, identify bugs, and improve our AI models and user experience
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Data Storage and Security

4.1 Where We Store Your Data

• Images: Uploaded and generated images are stored securely using Vercel Blob storage
• Account Data: User information and metadata are stored in our PostgreSQL database hosted on secure cloud infrastructure
• Analytics: Usage analytics are processed through Vercel Analytics

4.2 Data Location

Our primary data storage is located in the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to and processed in the United States.

5. Third-Party Services

We use the following third-party services that may collect or process your information:

• Vercel: Hosting, blob storage, and analytics
• AI Service Providers: Our AI models process your uploaded images to generate product photos; images may be temporarily processed by these providers
• Payment Processors: For handling credit purchases securely

These third parties have their own privacy policies governing their use of your information. We recommend reviewing their policies.

6. Cookies and Tracking

6.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and core service functionality
• Analytics Cookies: Used to understand how visitors interact with our service
• Preference Cookies: Store your settings and preferences

6.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, disabling essential cookies may affect your ability to use our service.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 GDPR Rights (EU/EEA Residents)

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Residents)

• Right to Know: Know what personal information is collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

7.3 Exercising Your Rights

To exercise any of these rights, please contact us at support@aiproduct.photography. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for a reasonable period afterward
• Uploaded Images: Stored until you delete them or close your account
• Generated Images: Stored until you delete them or close your account
• Usage Logs: Typically retained for 90 days for security and debugging purposes

9. Children's Privacy

Our service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information. If you believe we may have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or rely on other legal mechanisms to ensure your data is protected.

11. Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

• Enforced TLS encryption for all data in transit (emails will not be sent if a secure connection cannot be established)
• Encryption of data at rest
• Secure authentication via magic link (no passwords stored)
• Regular security assessments and updates
• Access controls limiting who can access your data
• Monitoring for suspicious activity

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

For significant changes, we may also send you an email notification. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your information, please contact us:

If you are in the European Union and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.