Privacy Policy

1. Who we are (Data Controller)

The data controller responsible for processing your personal data is the operator listed in the “Business details” section below.

2. Personal data we collect

We may collect the following categories of personal data:

• Account data: email address, username, account identifiers.
• Contact data: email address and communications you send to support.
• Payment data: limited transaction information (we do not store full card details).
• Usage data: interactions with the Service, device and browser information.
• User content: photos or images you upload for processing.

3. How we use personal data

We use personal data to:

• Provide and operate the Service.
• Process payments and manage purchases.
• Generate AI-assisted outputs based on your inputs.
• Communicate with you about your account or support requests.
• Improve, secure, and maintain the Service.
• Comply with legal and regulatory obligations.

4. Legal bases for processing (GDPR)

We process personal data based on one or more of the following legal grounds:

• Contract: to provide the Service you request.
• Consent: where you have given consent (e.g., optional communications).
• Legitimate interests: to operate and improve the Service, prevent fraud, and ensure security.
• Legal obligations: to comply with applicable laws.

5. AI processing and user content

Photos or images you upload are processed automatically to generate AI-assisted outputs. User content is used solely to provide and improve the Service.

• You retain ownership of your uploaded content.
• We do not use your photos to identify you outside the Service.
• We do not sell your personal data.

6. Data sharing and processors

We may share personal data with trusted third-party processors only as necessary to operate the Service, such as:

• Payment providers and Merchant of Record.
• Hosting and cloud infrastructure providers.
• Analytics and security services.

These providers process data on our behalf under contractual obligations and appropriate safeguards.

7. International data transfers

Your data may be processed in countries outside your country of residence. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect your personal data.

8. Data retention

We retain personal data only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Uploaded images may be deleted or anonymized after processing or after a reasonable retention period.

9. Your rights

Depending on your location, you may have the following rights:

• Access to your personal data.
• Correction of inaccurate or incomplete data.
• Deletion of your personal data (“right to be forgotten”).
• Restriction or objection to processing.
• Data portability.
• Withdrawal of consent at any time (where processing is based on consent).

To exercise your rights, contact us using the details below.

10. Cookies and analytics

We may use cookies or similar technologies to operate and analyze the Service. You can control cookies through your browser settings. Some features may not function properly without cookies.

11. Security

We implement reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children’s privacy

The Service is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

13. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

14. Contact

For questions or requests regarding privacy and data protection, contact us at: info@snapstick.ai

Business details