WHAT WE HOLD

• Your email address, and a display name if you gave one.
• Your password, stored only as an argon2id hash. We cannot read it and cannot recover it.
• The photos you upload, the rendered results, and the edit settings for each.
• Your orders and what was charged, so an invoice can be reproduced later.

WHAT WE NEVER HOLD

Card details. Payment happens on Stripe's own checkout page — card numbers never reach this site, and we receive only a confirmation that a payment succeeded.

WHO ELSE PROCESSES IT

• Stripe — payments.
• Cloudflare R2 — stores your photos.
• Neon — the database holding accounts and orders.
• Resend — sends verification and password-reset email.
• OpenAI — only for photos where you request an AI edit, and only that photo.

YOUR PHOTOS

They are yours. We use them to produce the edit you asked for and for nothing else — not to train models, not as marketing, not shown to anyone else. Downloads are served through short-lived signed links rather than public URLs.

DELETION

Ask and we will delete your account and every file attached to it. Records of what was charged are kept as long as tax law requires.