Privacy Policy
This policy explains what information Photopol processes, why we need it, who helps us provide the service, and how you can exercise your privacy rights.
Who we are and how to contact us
Photopol is the creative software service at photopol.us and studio.photopol.us. “Photopol”, “we”, “us” and “our” mean the operator of that service under the Photopol brand. We are responsible for the personal information we use to operate our website, accounts and customer relationships.
Contact Photopol at support@photopol.us. Telephone: +972 52-608-4983. Use this address for privacy questions, account requests or concerns about content containing your personal information.
Information we collect
Account information includes your email address, account identifier and profile information you provide. Amazon Cognito handles authentication. Passwords entered on our form pass through the Photopol server to Cognito for authentication; the Photopol application does not store them.
Workspace content includes images, reference material, masks, prompts, briefs, brand information, project files and other material you submit, together with edits and generated results. Associated information includes file names, dimensions, creation times, project relationships, processing status and credit activity.
Technical information can include your IP address, browser and device information, request identifiers, sign-in and security events, and diagnostic information. Infrastructure providers may process this information while delivering and protecting the service.
Support messages contain the details you choose to send us. For purchases through Paddle, we receive billing contact information, transaction and subscription identifiers, payment status and related records needed to fulfill the order. Paddle collects payment details; Photopol does not receive or store your full card number.
Why we use information
We use information to create and secure accounts, deliver the tools you request, save and retrieve projects, provide downloads, administer subscriptions and credits, answer support requests, and communicate essential account or service information.
Operational information helps us troubleshoot failures, prevent duplicate processing, investigate misuse, protect the service, reconcile payments and comply with legal obligations. We do not sell your personal information or use your workspace content for targeted advertising.
Where data protection law requires a legal basis, we rely on performing our agreement with you for account and service delivery, legitimate interests for proportionate security and service maintenance, and legal obligations for required records. We seek consent where required. You may withdraw consent without affecting processing that was lawful before withdrawal. Acceptance of this policy is not blanket consent for unrelated uses.
Providers and information sharing
Amazon Web Services supplies hosting, authentication, databases, storage and other infrastructure. Authorized personnel and providers may access information as needed to operate the service, answer support requests or investigate security and reliability issues. Uploading an image alone does not send it to an AI model.
When an AI workflow is available and you request it, necessary inputs can be sent to Replicate and the selected model’s processing infrastructure. These may include prompts, images, masks, settings and relevant creative or brand information. Results can be returned to and saved in your workspace. Review the workflow and provider terms before submitting confidential or sensitive material.
Paddle acts as Merchant of Record for purchases it processes and handles payment, tax, fraud prevention and transaction support under its own privacy notice. We exchange the information needed to reconcile your purchase and provide the service.
We may disclose relevant information when legally required, to address fraud or threats to people or the service, or during a business transfer subject to appropriate confidentiality and privacy protections. We do not publish private workspace content as marketing material without permission.
Cookies and browser storage
Necessary session cookies maintain sign-in, and short-lived cookies help complete authentication challenges. Editor workflows can save prompts, request briefs, unfinished form fields and settings in your browser’s local storage to recover interrupted work.
Locally saved drafts may remain after sign-out until you clear the site’s browser storage. Use a trusted device for private work. Clearing storage can remove drafts or interrupt request recovery; blocking necessary cookies can prevent sign-in.
The public marketing website does not use advertising or optional analytics cookies. If we introduce optional tracking requiring permission, we will describe it and obtain the required consent before use.
Retention, trash and deletion
We retain account and workspace information while needed to provide your account and requested services. Retention depends on the information’s purpose, account activity, unresolved support or payment matters, security needs and applicable legal requirements. We review deletion requests against these purposes and obligations.
Moving a file or project to Trash is reversible and does not permanently erase it. Trashed files may still count toward storage. Object versions, backups and records can remain after an item disappears from the interface; erasure is not instantaneous.
To request account closure or deletion of personal information, email support@photopol.us from your account address and identify what you want removed. We may verify your identity. Some records may need to remain for legal obligations, fraud prevention or a dispute; we will explain relevant restrictions when responding. Canceling a subscription does not itself delete your account.
Security and international processing
We use measures including encrypted connections, access controls and restricted service credentials to protect information. No online service or storage system guarantees absolute security. Keep your credentials private and contact us promptly about suspected unauthorized access.
Our current application database and asset storage use AWS’s Paris region. Providers, support and requested AI processing may involve other countries, so this does not mean all information stays in France or the European Union. Applicable legal requirements for international transfer safeguards continue to apply.
Your privacy rights
Depending on the applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to certain processing, and withdraw consent where it is the basis for processing. You may also complain to your local data protection authority. We will not penalize you for exercising a legally protected privacy right.
Contact Photopol at support@photopol.us. Telephone: +972 52-608-4983. Explain the request and the account it concerns without sending passwords or full card details. We may reasonably verify your identity or authority before disclosing or changing private information. We respond within the periods required by applicable law and explain if a request cannot be fulfilled. Paddle handles requests concerning information it controls in its own payment relationship with you.
Children and other people’s information
Photopol accounts are intended for adults who can enter into a binding agreement. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal information through an account so we can investigate and take appropriate action.
Only upload information about other people when you have the permissions and legal authority needed for its requested use. Avoid identity documents, financial information, medical records and other sensitive material unnecessary for your creative work.
Policy updates
We may update this policy as the service or legal requirements change. We will publish a new effective date and give additional notice of material changes where required. A change does not remove rights you already have under applicable law.