This Privacy Policy explains how Prime PhotoAI (“Prime PhotoAI”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when you use our website and AI marketing-image generation service (the “Service”). It also describes the rights you have over your personal data.

Prime PhotoAI operates the Service. For the purposes of the EU and UK General Data Protection Regulation (“GDPR”), Prime PhotoAI is the data controller of your personal data. If you do not agree with this Policy, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account & identity data. When you sign in with Google, we receive your name, email address, profile image, and Google account identifier from your Google profile. We do not collect or store passwords.
• Content you provide. Product photos and reference images you upload, brand logos, brand name, product descriptions, and other inputs you submit for generation.
• Generated content. Images, captions, prompts, and related metadata produced by the Service, along with generation settings such as resolution and aspect ratio.
• Billing data. Subscription plan, subscription and customer identifiers, transaction status, and billing amounts. Payments are processed by our payment provider (Dodo Payments); we do not receive or store full payment card numbers.
• Usage & credit data. Credit balances, credit transaction history, generation history, and feature usage.
• Technical & device data. IP address, browser and device type, log data, and approximate location derived from your IP address.
• Analytics & cookie data. Events and identifiers collected through cookies and similar technologies (see Section 7).

2. How We Use Your Information & Legal Bases

We use personal data for the purposes below. Where the GDPR applies, the relevant legal basis is indicated in brackets.

• Provide, operate, and maintain the Service, including generating images from your inputs [performance of a contract].
• Authenticate you and secure your account [performance of a contract; legitimate interests].
• Process subscriptions, credits, and payments [performance of a contract].
• Provide customer support and respond to your requests [performance of a contract; legitimate interests].
• Monitor, debug, prevent fraud/abuse, and improve reliability and security of the Service [legitimate interests; legal obligation].
• Measure and improve the Service, including analytics and advertising performance [consent, where required; otherwise legitimate interests].
• Send service-related communications and, where permitted, product updates [performance of a contract; legitimate interests; consent where required].
• Comply with legal obligations and enforce our terms [legal obligation; legitimate interests].

We do not use your uploaded images, generated outputs, or product descriptions to train our own general-purpose AI models.

3. AI Processing of Your Content

To generate creatives, your inputs are transmitted to and processed by third-party AI providers that operate on our behalf:

• AI language & vision providers — used to interpret your product images and descriptions and to draft captions and prompts.
• AI image-generation providers — used to render your output images from your inputs and reference images.

This means the images, logos, and descriptions you submit are sent to these providers for the sole purpose of producing your requested output. Their handling of data is governed by their respective terms and privacy policies. Output images are then stored in our managed file storage so you can access them in your Assets library.

4. How We Share Information

We do not sell your personal data. We share it only with the following categories of recipients (our “sub-processors” and partners):

We may also disclose personal data: (a) to comply with law, regulation, or valid legal process; (b) to protect the rights, property, or safety of Prime PhotoAI, our users, or others; and (c) in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

5. Cookies & Analytics

We and our partners use cookies, local storage, and similar technologies to:

• Keep you signed in and maintain your session (strictly necessary).
• Remember preferences and in-progress work (functional).
• Measure traffic and usage with Vercel Analytics and Google tag/measurement (analytics).
• Measure advertising and conversions via Google Ads (advertising).

Where required by law, we request consent before setting non-essential cookies. You can control cookies through your browser settings; disabling some cookies may affect functionality.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements.

• You can delete individual generations, uploaded images, reference assets, and logos from within the app at any time.
• Credit transaction records are retained for accounting, audit, and fraud-prevention purposes even after related content is deleted.
• When you request account deletion, we delete or anonymize your personal data except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

We and our sub-processors may process personal data in countries other than your own, including the United States. Where we transfer personal data out of the EEA, the UK, or other regulated regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

9. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• Opt out of the “sale” or “sharing” of personal data and of targeted advertising (we do not sell personal data).
• Not be subject to discrimination for exercising your rights.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at admin@primephotoai.com. We will respond within the timeframe required by applicable law and may need to verify your identity first.

10. Children's Privacy

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where required, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at admin@primephotoai.com.