Privacy Policy

Overview

This Privacy Policy explains how ProduktShot ("we", "us", "our") collects, uses, and shares personal data when you use our services. We process personal data as a data controller under applicable EU and Slovak law.

Data We Collect

• Account data: name, email, username, password hash, locale.
• Billing data: subscription status and payment identifiers processed by Stripe.
• Content data: prompts, uploaded images, and generated outputs you create.
• Usage data: logs, device/browser metadata, IP address, and error diagnostics.

How We Use Data

• Provide and maintain the ProduktShot platform.
• Process AI generation requests and deliver outputs.
• Manage subscriptions, credits, and billing.
• Enforce content policies and prevent abuse.
• Improve performance, reliability, and user experience.

Legal Bases

We process personal data on the following bases:

• Contract: to provide the services you request.
• Legitimate interests: to secure, improve, and operate the platform.
• Consent: where required for optional cookies or communications.
• Legal obligation: to comply with applicable laws.

Processors and Transfers

We use trusted processors such as Stripe (payments), Cloudflare R2 (storage), and AI providers (image/video generation). These providers may process data outside the EU. We rely on contractual safeguards for such transfers.

Retention

We retain data for as long as your account is active or as needed to provide the services. We may retain certain records to meet legal or security obligations.

Your Rights (GDPR)

You have the right to:

• Access, correct, or update your personal data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing in certain cases.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Slovak Data Protection Authority.

To exercise these rights, contact us using the details below. We may need to verify your identity before fulfilling a request.

Security

We implement technical and organizational measures to protect your data. No system can be fully secure, and you use the service at your own risk.