Privacy Policy

Last updated: January 7, 2025

1. Who we are (Data Controller)

This application (the "Service") is operated by:

CUI/Tax ID:51808370

If no Data Protection Officer (DPO) is appointed, privacy requests should be sent to the contact email above.

2.What the Service does

The Service allows authenticated users to upload a food photo and generates an improved "AFTER" image with a professional studio look while preserving the same plate and food arrangement.

3.What data we collect

A) Account data

  • Email address
  • Internal user identifier (user_id)
  • Authentication/session technical data (session tokens, login events)

B) Uploaded / generated content

  • The generated "AFTER" image saved to your account
  • Generation metadata (e.g., timestamp, generation settings, success/failure status)

Note: We do not intend to store the original "BEFORE" photo. The input photo is used only to process your request and is not kept as history within the Service.

C) Technical and usage data

  • Logs needed for operation and security (e.g., system events, errors)
  • IP address and device/browser information may be collected by infrastructure for security and abuse prevention

D) Cookies / similar technologies

The Service may use strictly necessary cookies for authentication and core functionality (e.g., session cookies).

4.Purposes and legal bases

We process your data to:

Provide the Service (account creation, authentication, image generation, history storage)

Legal basis: performance of a contract

Security, abuse prevention, troubleshooting

Legal basis: legitimate interests (protecting and operating the Service)

Legal compliance (if applicable)

Legal basis: legal obligation

5.Cookies, Analytics and Advertising

We use cookies and similar technologies for the following purposes:

  • Strictly necessary cookies: Required for authentication and core functionality (e.g., session cookies)
  • Analytics cookies: We use Google Analytics 4 (GA4) to understand how visitors use our website and to improve our Service
  • Advertising cookies: We use the Meta Pixel (Facebook Pixel) to measure the effectiveness of our advertising campaigns on Facebook and Instagram, to create custom audiences for targeted advertising, and to track conversions (e.g., sign-ups, purchases). The Meta Pixel may collect data such as pages visited, actions taken on the site, and device information

Google Analytics collects anonymized data about your visit, such as pages viewed, time spent on the site, and general location (country/city level). This data helps us improve the user experience.

The Meta Pixel sends data to Meta Platforms, Inc. (Facebook) which may use this data in accordance with its own Privacy Policy. You can manage your ad preferences on Facebook through your Ad Preferences settings.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6.Service providers (Processors)

We may use third-party providers to operate the Service, such as:

  • Hosting/backend infrastructure (including authentication, database, storage)
  • OpenRouter (AI processing for image generation)
  • Meta Platforms, Inc. (Meta Pixel for advertising measurement and conversion tracking)
  • Stripe for payments and invoicing

These providers may process data on our behalf only to deliver their services.

7.International transfers

Some providers (e.g., AI or analytics services) may process data outside the European Economic Area. Where applicable, we will rely on appropriate safeguards (e.g., Standard Contractual Clauses) as required by law.

8.Data retention

Account data

As long as you maintain an active account or until you request deletion, unless legal obligations require longer retention.

"AFTER" images and history

Until you delete them in your account or until account deletion. We may apply a reasonable retention period for prolonged inactivity (e.g., 12–24 months) to limit storage.

Technical logs

Kept for a limited period, proportionate to security and troubleshooting needs.

9.Your rights

Subject to applicable law, you have the right to:

  • Access, rectification, deletion
  • Restriction and objection
  • Data portability
  • Withdraw consent (where processing is based on consent)

You can delete images in-app (where the delete option exists) and/or contact us via the email above.

10.Complaints

If you believe your rights have been infringed, you may file a complaint with the Romanian Supervisory Authority (ANSPDCP).

11.Security

We implement reasonable technical and organizational measures to protect your data (e.g., user-level access control, storage access rules, logging and anti-abuse protections). However, no transmission or storage method is 100% secure.

12.Children

The Service is intended for users who can legally enter into contracts. We do not knowingly collect children's personal data.

13.Changes to this policy

We may update this policy from time to time. The current version will be available in the Service with the last updated date.

Questions about this policy?

contact@platestudio.ro