Privacy Policy

1. Controller

The controller of your personal data is:

Andrei Protasevich
Belgrade, Serbia
Email: mail@protasevich.com

2. Eligibility

Our service is intended only for individuals who are 21 years of age or older.

3. Personal Data We Collect

We may collect the following personal data:

• Email address, when you create an account or sign in;
• Photograph, when you upload a photo as part of an order;
• Session data, through an essential cookie used for guest access;
• Generated images, created through the service;
• Payment-related information, processed by our payment provider.

Before uploading a photograph, you must confirm through a separate checkbox that the photograph is yours, depicts you, and that you have the necessary rights to use and submit it for the service.

4. How We Use Personal Data

We use personal data to:

• create and manage your account;
• provide the requested service;
• maintain guest sessions;
• store and provide generated images;
• process payments;
• operate, maintain, and secure the service.

5. Legal Bases

Where applicable, we process personal data on the basis of:

• performance of a contract;
• steps taken at your request before entering into a contract;
• our legitimate interests in operating, protecting, and improving the service.

6. Service Providers and Recipients

We use third-party service providers where necessary to operate the service, including:

• Supabase, for authentication and account infrastructure;
• Cloudflare, for temporary storage of uploaded photographs and storage of generated images;
• Google AI services, for processing uploaded photographs to generate the requested output;
• Polar, for handling payments.

We may also disclose personal data where required by law, to protect our rights, or in connection with a business transfer.

7. International Transfers

Because we use international service providers, your personal data may be processed in countries outside your own. Where required, we apply appropriate safeguards in accordance with applicable law.

8. Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

• Account data: while your account remains active, unless a longer retention period is required by law or reasonably necessary for legal claims, security, or fraud prevention;
• Uploaded photographs: stored temporarily only for the purpose of providing the service and deleted immediately after they are no longer needed for order processing, and in any event no later than 1 hour if the order is not completed;
• Essential guest session cookie: stored for 24 hours;
• Generated images for guest users: stored for 12 hours;
• Generated images for registered users: stored until deleted through the user interface, upon request, or when you delete your account.

9. Cookies

We use one essential cookie to maintain a guest session and enable guest checkout for 24 hours.

Based on the current configuration, we do not use analytics or advertising cookies.

10. Automated Processing

Our service uses AI-based processing to generate images from photographs you upload. This processing is performed solely to fulfill your order and does not involve automated decision-making that produces legal or similarly significant effects about you.

11. Payments

Payments are processed by Polar under its own terms and policies. We do not store your full payment card details.

12. Account Deletion and User Controls

If you have an account, the user interface includes a Delete account function.

When you use this function, we delete your generated images and account information, except where limited retention is required by law or reasonably necessary for legal claims, security, or fraud prevention.

13. Your Rights

Depending on your location and applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• request restriction of or object to our processing;
• request data portability where applicable;
• lodge a complaint with a relevant supervisory authority.

To exercise your rights, contact mail@protasevich.com. We may request information reasonably necessary to verify your identity before processing your request.

14. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updated version will be posted on the website with a revised Effective Date.

16. Contact

For privacy questions or requests, please contact:
mail@protasevich.com