Privacy Policy

1. Who we are

ShopPhoto AI operates the online service available at shopphotoai.com. For the information described in this policy, ShopPhoto AI is the data controller unless a service provider acts as an independent controller, such as our merchant of record for payment transactions.

Privacy questions and requests can be sent to support@shopphotoai.com. We operate an online-only service and do not provide in-person support.

2. Information we collect

• Content: product images you upload, generated previews and paid output, scene selections, and related generation instructions.
• Order information: email address, order identifier, price, currency, payment status, timestamps, and recovery-link activity. We do not receive or store your full payment-card number.
• Support information: messages, attachments, and contact details you send when requesting help, a refund, or a privacy action.
• Technical information: IP address, browser and device details, request timestamps, diagnostic events, security signals, and limited usage logs needed to operate and protect the service.
• Cookie and local-storage information: strictly necessary checkout, security, and preference records described in our Cookie Policy.

3. Why we use information

4. Service providers and disclosures

We share only what is reasonably necessary with providers that help run the service:

• AstraFlow / ModelVerse: image generation using the uploaded source image and scene instructions.
• Cloudflare: content delivery, security, and object storage for uploaded and generated assets.
• Creem: merchant of record for checkout, payment, tax, receipts, refunds, and disputes. Creem may process payment data under its own privacy terms.
• Resend: transactional email, receipts, and order-recovery messages.
• Sentry, when enabled: error diagnostics and service-reliability monitoring.
• Hosting and database providers: application delivery, operational logs, generation jobs, and order records.

We may also disclose information when required by law, to protect users or the service, or as part of a business reorganisation where appropriate safeguards apply.

5. Retention and deletion

• Unpaid source images and previews: normally deleted within 24 hours.
• Paid source images and high-resolution results: available for 7 days.
• Anonymous technical and generation logs: normally retained for up to 30 days.
• Order, payment, refund, fraud-prevention, and accounting records: retained only as long as required for legal, tax, dispute, and financial obligations.
• Support messages: retained while needed to resolve and document the request.

Deletion from active systems may not immediately remove limited encrypted backups or records we are legally required to keep.

6. Your images and AI training

We use your images to provide the generation service you request. ShopPhoto AI does not sell your images and does not use them to train our own or third-party AI models unless we obtain separate, explicit opt-in permission in the future.

7. International processing

Our providers may process information in countries other than yours. Where data-protection law requires it, we rely on appropriate contractual safeguards, adequacy decisions, or other lawful transfer mechanisms.

8. Security

We use access controls, encrypted transport, private storage for paid assets, limited retention, and secret-management practices designed to protect information. No online service can guarantee absolute security, so please avoid uploading information that is not needed to create your product images.

9. Your privacy rights

Depending on where you live, you may have rights to access, know, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal or complain to a data-protection authority. California residents may also have rights to know, delete, correct, and receive equal service when exercising privacy rights.

We do not sell personal information or share it for cross-context behavioural advertising. To make a request, email support@shopphotoai.com with “Privacy request” in the subject. We may need to verify your identity before acting.

10. Children

The service is intended for adults and business users. We do not knowingly collect personal information from children under 13, or under the higher minimum age required in their country. Contact us if you believe a child has submitted information.

11. Changes and contact

We may update this policy as the service or law changes. The date above shows the latest revision. Material changes will be presented through an appropriate notice. Questions can be sent to support@shopphotoai.com.