1. Data Controller
The controller of your personal data is the entity identified below:
You may contact the controller via the contact form available in the Contact section of the Service.
2. What Data We Collect
In connection with the use of the Service, we collect the following data:
- Email address and name provided during registration.
- IP address and device information (browser type, operating system).
- Images uploaded to the Service for AI image generation.
- Data related to activity in the Service (generation history, Credit usage).
3. Purposes of Processing
- Managing the User Account and providing Service functionality.
- Processing orders and handling payments.
- Communication with the User (responding to inquiries, notifications).
- Direct marketing of our own products and services (with User consent).
- Analyzing and improving the Service.
4. Legal Bases
We process personal data on the basis of GDPR Art. 6:
- Art. 6(1)(a) – User consent (marketing, analytical cookies).
- Art. 6(1)(b) – necessity for the performance of a contract (service delivery, Account management).
- Art. 6(1)(f) – legitimate interest of the controller (analytics, security).
5. Retention Period
We retain personal data for the period necessary to fulfill the purposes of processing:
- Account data – for the duration of the Account and 30 days after deletion.
- Transaction data – for the period required by tax regulations (5 years).
- Marketing data – until consent is withdrawn.
- Uploaded images – for the duration of the Account or until deleted by the User.
6. Data Sharing
Personal data may be shared with the following categories of recipients:
- AI service providers (to the extent necessary for image generation).
- Payment processor (to the extent necessary for transaction processing).
- Analytics tool providers (Plausible Analytics – a privacy-friendly tool).
- Public authorities when required by law.
7. User Rights
Under the GDPR (Art. 15–22), you have the following rights:
- Right of access – you may obtain information about what data we process.
- Right to rectification – you may request the correction of inaccurate data.
- Right to erasure – you may request the deletion of your data ("right to be forgotten").
- Right to data portability – you may receive your data in a structured format.
- Right to object – you may object to the processing of data for marketing purposes.
- Right to restriction of processing – you may request the restriction of data processing.
To exercise your rights, contact us via the contact form available in the Contact section of the Service.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
8. Cookies and Tracking Technologies
The Service uses cookies. Detailed information about the cookies we use can be found in the Cookie Policy available in the Service.
9. Data Transfers Outside the EEA
In connection with the use of AI service providers, data may be transferred outside the European Economic Area. In such cases, we apply appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
10. Security
We apply appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction, including data transmission encryption (SSL/TLS) and regular backups.
11. Policy Changes
The Service Provider reserves the right to amend this Privacy Policy. Users will be informed of significant changes via the Service or electronically.
12. Contact
For matters relating to personal data protection, please contact us via the contact form available in the Contact section of the Service.