Privacy Policy
Privacy Policy for PictureLab AI.
1. Responsible Entity
Responsible for data processing is: Nasifa Etcil PictureLab AI Karpfenweg 5 85586 Poing Germany E-Mail: info@picturelab.ai
2. Collection and Processing of Personal Data
We process personal data only as necessary to provide our services. Processed data may include: - Uploaded images - Email address - Payment information (via payment providers) - Technical usage data (IP address, browser, time)
3. Processing of Images
(1) Uploaded images are used exclusively for creating AI-generated photos. (2) Images are not publicly displayed, sold, or used for advertising purposes without consent. (3) Processing is automated.
4. Storage and Deletion
Uploaded images and generated content are stored only as long as necessary to provide the service or as required by legal retention periods.
5. Payment Processing
Payment processing is handled by external payment service providers (e.g., Stripe, PayPal). Payment data is transmitted directly to the respective provider. PictureLab does not store full payment data.
6. Data Transfer
Personal data is transferred to third parties only: - If necessary for contract execution - Due to legal obligations - Or with the user's explicit consent. Transferred data is not used for training purposes unless explicitly stated.
7. Processing of Images by AI Providers
To provide our services, we use external AI providers for image processing and model training. Uploaded images may be transferred to external AI providers to train AI models and generate images. Processing is done exclusively to provide and improve our services. Uploaded images may be used for AI model training purposes if the user explicitly consents. The user can revoke this consent at any time with future effect. We strive to use only AI providers who do not permanently store data or use it for their own purposes.
8. Use of Content for AI Processing
The user agrees that uploaded images may be used for the creation and potentially training of AI models. This usage is exclusively for improving and providing the offered services. Usage for advertising purposes does not occur without separate consent.
9. Hosting / Database
Our platform is hosted on cloud infrastructure within the European Union. We use Supabase (Supabase Inc.) services for storing user data and uploaded images. Data processing is done exclusively for providing our platform, storing user accounts, and processing/storing uploaded content. Data storage takes place on servers within the European Union. Agreements for data processing according to Art. 28 GDPR exist with the provider.
10. User Rights
Users have the right to: - Information about their stored data - Correction or deletion - Restriction of processing - Data portability - Revocation of given consents Requests can be made via email at any time.
11. Data Security
We implement technical and organizational measures to protect personal data against loss, manipulation, or unauthorized access.
12. Changes
This privacy policy may be adjusted as needed to reflect legal or technical changes.