Privacy Policy

Who we are

StudioShot Pro is run by [Company name], which is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

[Company name], [Registered address]. VAT number: [ΑΦΜ / VAT number]. GEMI number: [ΓΕΜΗ number]. Email: info@studioshotpro.com.

What we collect

• Account details: your email address, your name if your Google account or you give it, and the language you use the app in. You sign in with Google or with a link we email you, so we never have a password of yours.
• Your content: the photos you upload, and the web address of any photo you import from a link; the scenes, colours, cleanup and shape you choose; the descriptions you write for your own scenes; your sets; and the images we generate for you.
• Payment details: whether you buy as a business or as an individual, your billing name or company name, address and country, your VAT number if you give one, your subscription status and your invoices and receipts. Card payments are handled by Stripe. We never see or store your full card number.
• Records of what you accepted: when you accept the terms of service, confirm the notice that comes with the cleanup option, or ask for your plan to start straight away and waive your right of withdrawal, we record the date, the version of the terms and your IP address.
• Technical data: your IP address, browser and device type, and logs of how you use the service. We use these to keep it running and secure.
• Messages: anything you send us through the contact form in the app or by email.

This website does not use advertising or analytics cookies. It remembers your language choice in your browser's local storage, and that choice never leaves your device. The app uses only the cookies it needs to keep you signed in, which our sign-in provider Clerk sets. When you pay, Stripe's checkout page sets its own cookies to process the payment and prevent fraud.

To count visits, the website uses Vercel Web Analytics, which works without cookies and stores nothing on your device. It records the page you visit, the site or link that brought you here, your country, and your browser, operating system and device type. It tells visits apart with an anonymous code that resets every day, so it can't follow you from one day to the next or identify you.

Why we use it

• To provide the service: creating your account, generating your images and keeping your library. The legal basis is our contract with you.
• To take payments, issue invoices and receipts through the Greek myDATA system, and keep accounting records. The legal basis is our legal obligations under Greek tax law.
• To keep proof of what you accepted, such as the terms of service and the waiver of your right of withdrawal. The legal basis is our legal obligations under consumer law and our legitimate interest in being able to show what was agreed.
• To keep the service secure, prevent fraud and abuse, such as people signing up again to get more free images, and fix problems. The legal basis is our legitimate interest in running a safe, working service.
• To understand how people find and use the website, so we can improve it. The legal basis is our legitimate interest in knowing which pages and channels work.

We don't sell your personal data, we don't use it for advertising profiles, and we don't send you marketing emails.

When someone deletes their account, we keep a one-way hash of their email address. When you sign up, we automatically check your email against these hashes. If it matches, your new account gets no free images, but you can still subscribe to a plan. This is the only automated decision we make about you. If you think it's wrong, email us and a person will look at it.

How your photos are processed

To generate an image, we send your photo, the scene you picked and, for your own scenes, the description you wrote to OpenRouter, which passes the request to ByteDance's Seedream image model. They process them only to create your image and return it to us. When you try out a scene of your own, we use our own sample product, not your photos.

The images come back with metadata, including signed Content Credentials (C2PA), that marks them as made with AI, as EU law requires. We store and deliver them unchanged, and we don't add your name or any other personal data to them.

We don't use your photos or generated images to train AI models, and we don't share them publicly. They're stored privately, and only you can see them in your account.

Who we share it with

We share personal data only with service providers that help us run StudioShot Pro, and only what each one needs:

• Clerk, for sign-in and accounts.
• Stripe, for payments, VAT calculation and managing your subscription.
• PROSVASISGO, a licensed e-invoicing provider, which sends our invoices and receipts to the myDATA system of the Independent Authority for Public Revenue (AADE).
• OpenRouter and ByteDance (Seedream), for generating images.
• Cloudflare, which stores your photos and images.
• Neon, which hosts our database.
• Vercel, which hosts the website and the app and measures visits to the website.

AADE receives the invoice and receipt details that Greek tax law requires. We may also share data with other public authorities when the law requires it.

Transfers outside the EU

Some of these providers process data outside the European Economic Area, for example in the United States. When they do, we rely on the safeguards the GDPR provides, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the Commission's Standard Contractual Clauses.

How long we keep it

• Account details: for as long as your account is open. When you delete your account, we remove your email address, name and billing details from our records straight away and delete your sign-in.
• Photos, generated images, your own scenes and sets: on the free images, for 30 days after each one is created. On a paid plan, for as long as your subscription lasts. If your subscription ends, for 120 days after the end of your last paid period, unless you subscribe again before then. They're deleted straight away when you delete them or your account.
• Uploads that never finish: deleted within a day.
• Records of generations: we keep a record that each generation happened, for usage and accounting, but without the images or the scene description.
• Records of what you accepted, with their date and IP address: for as long as we may need to show them, including after you delete your account.
• Payment records, invoices and receipts: for as long as Greek tax law requires, normally 5 years.
• The one-way hash of a deleted account's email address: for as long as we offer free images. It can't be turned back into your email address.
• Messages through the contact form: until you delete your account. Emails: for as long as we need them to answer you.
• Technical logs: for a short period, no longer than 12 months.

Your rights

Under the GDPR you can ask us to:

• give you a copy of your personal data,
• correct data that is wrong or incomplete,
• delete your data,
• restrict how we use your data, or object to us using it,
• send your data to you or another service in a machine-readable format.

You can do some of this yourself in the app: download your images at any time, change your billing details from Manage billing in Settings, and delete your account and all your images from Settings.

You can also withdraw any consent you've given at any time. To use these rights, email us at info@studioshotpro.com. We'll reply within one month.

If you think we've handled your data wrongly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the data protection authority in the EU country where you live.

Security

We protect your data with encryption in transit, access controls and providers with strong security records. Your photos and images are kept in private storage and are only shown to you through links that expire after a few minutes. No system is perfectly secure, but if a breach puts your data at risk, we'll tell you and the authorities as the law requires.

Children

StudioShot Pro is a business tool for people aged 18 and over. We don't knowingly collect data from children.

Changes to this policy

If we make important changes to this policy, we'll tell you by email or in the app before they take effect. The date at the top shows when it was last updated.

Contact

Questions about your privacy? Email us at info@studioshotpro.com.