Account data — your email address and a hashed password, plus your plan. Lawful basis: performance of our contract with you. Kept while your account exists and for six years afterwards where it forms part of a billing record we must retain.
Uploaded images — the flat shots and artwork files you submit, and the results generated from them. Lawful basis: performance of our contract. Encrypted at rest, readable only by your account, deletable by you at any time, and removed from backups within 30 days of deletion. Never used to train any model. Never shown as an example unless you give separate, explicit, file-by-file consent.
Billing data — the plan, the amount, the dates and the country we charge in. Card details are handled entirely by our PCI DSS compliant payment processor and never reach our servers. Lawful basis: contract, and legal obligation for tax records. Kept six years.
Support correspondence — what you write to us and what we write back. Lawful basis: legitimate interests in answering you and keeping a record of what was said. Kept three years.
Optional analytics — aggregate counts of which zones are opened and which plans are viewed. Lawful basis: your consent, collected through the cookie banner and revocable at any time from the cookie page. Nothing runs before you consent. Kept 14 months.
Security logs — IP address, timestamp and request path for failed sign-ins and abuse detection. Lawful basis: legitimate interests in keeping accounts secure. Kept 90 days.