Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally.

2. Data Collection on Our Website

Who is responsible for data collection?

Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?

Your data is collected when you provide it to us. This could be data you enter in a contact form or when you create an account and use our AI image generation services.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

3. Services We Use

Vercel Hosting & Analytics

This website is hosted on Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel may collect technical data such as IP addresses, browser information, and usage statistics for hosting and analyticspurposes. For more information, see Vercel's privacy policy at vercel.com/legal/privacy-policy

Supabase (Database & Authentication)

We use Supabase for user authentication and data storage. When you create an account, your email address and encrypted password are stored securely. Your generated images and prompts are also stored in our Supabase database. Supabase is GDPR compliant and processes data in accordance with EU data protectionstandards. For more information, see Supabase's privacy policy at supabase.com/privacy

Fal AI (Image Generation)

We use Fal AI services to generate, upscale, and edit images based on your prompts. When you use our image generation features, your text prompts and generated images are processed by Fal AI. Fal AI may temporarily store this data for processing purposes. For more information about how Fal AI handles data,please visit fal.ai/privacy

4. What We Collect

  • Account Information: Email address, encrypted password
  • Generated Content: Your image prompts, scene descriptions, and generated images
  • Usage Data: Credits used, generation history, timestamps
  • Technical Data: IP address, browser type, device information, access times

5. How We Use Your Data

We use your data to:

  • Provide and maintain our AI image generation service
  • Authenticate your account and manage your sessions
  • Store your generation history for your convenience
  • Process your image generation, upscaling, and editing requests
  • Improve our services and user experience
  • Comply with legal obligations

6. Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. Your account information and generation metadata (prompts, timestamps, etc.) are stored as long as your account remains active.

Generated Image Files: Files generated by productPhotoAI are guaranteed to be available for at least 7 days from the date of generation. After this period, they may be deleted at any time to manage storage capacity. We recommend downloading and storing any images you want to keep for longer periods. You can delete your images at any time or request account deletion, which will remove all your data.

7. Your Rights

Under GDPR, you have the following rights:

  • Right of Access: You can request information about your stored data
  • Right to Rectification: You can request correction of inaccurate data
  • Right to Erasure: You can request deletion of your data
  • Right to Restriction: You can request restriction of data processing
  • Right to Data Portability: You can request your data in a structured format
  • Right to Object: You can object to data processing

To exercise these rights, please contact us at the email address provided in our imprint.

8. Data Security

We use SSL/TLS encryption for data transmission. Your password is encrypted using industry-standard hashing algorithms. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

9. Cookies

Our website uses cookies for authentication and session management. These are essential for the website to function properly. By using our website, you consent to the use of these necessary cookies.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.

11. Contact

If you have any questions about this privacy policy or our data practices, please contact us using the information provided in our imprint.

Last Updated: December 11, 2025