Privacy Policy

This Privacy Policy explains how PhotoFuse ("we", "us") processes personal data when you use our website and services. It describes the data we collect, the purposes for which we use it, the legal bases, and your rights.

1. Controller

PhotoFuse AI
Email: [email protected]

2. Data we collect

Usage and device data (e.g., IP address, browser type, language settings, referrer URL, interactions)
Account and profile data (e.g., name, email address, password hash)
Payment data (processed by payment providers — we do not store full card numbers)
Content you upload (e.g., photos to train a model)
Support and communications data (e.g., requests to our support team)

3. Purposes of processing

Providing and operating our services
Account management, billing, and customer support
Improving performance, security, and quality
Law enforcement, fraud prevention, and compliance with legal obligations
Communications about updates, features, and offers (with consent where required)

4. Legal bases (EU/GDPR)

Performance of a contract (Art. 6(1)(b) GDPR)
Legitimate interests (Art. 6(1)(f) GDPR)
Consent (Art. 6(1)(a) GDPR) — revocable at any time
Legal obligation (Art. 6(1)(c) GDPR)

5. Retention

We retain personal data only as long as necessary for the purposes described in this Policy or as required by law. You can delete training data and generated content in the app at any time; backups are overwritten within reasonable periods.

6. Sharing

We share data with service providers who help us operate our services (e.g., hosting, payments, analytics). These processors act under contract and only according to our instructions. We disclose data to authorities only where required by law.

7. International transfers

Where data is transferred outside the EEA, we implement appropriate safeguards (e.g., EU Standard Contractual Clauses) and regularly assess the level of protection.

8. Your rights

Access, rectification, erasure, restriction of processing
Data portability
Objection to processing based on legitimate interests
Withdrawal of consent with future effect
Complaint to a supervisory authority

9. Children

Our services are not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided data to us, please contact us.

10. Security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, and disclosure.

11. Changes

We may update this Privacy Policy from time to time. We will appropriately communicate material changes. The date of last update appears above.

12. Contact

If you have questions, contact us at [email protected].