Introduction
FoodPhoto.ai ("Company", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered food photography service at foodphoto.ai.
This policy applies to all users worldwide, including those in the European Economic Area (EEA), United Kingdom, California, and other jurisdictions with specific privacy regulations.
Information We Collect
Information You Provide Directly
- Account Information: Email address, name, and password when you create an account
- Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
- Photos: Food images you upload for AI enhancement
- Communications: Messages when you contact our support team
- Preferences: Your style preferences, presets, and settings
Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent on the platform
- IP Address: Used for security, fraud prevention, and approximate location
- Cookies: Essential, analytics, and preference cookies (see our Cookie Policy)
How We Use Your Information
- Service Delivery: Process your photos, deliver enhanced images, and provide customer support
- Account Management: Manage your subscription, credits, and billing
- Improvement: Analyze usage patterns to improve our AI models and user experience
- Communication: Send service updates, security alerts, and (with consent) marketing emails
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
- Security: Detect and prevent fraud, abuse, and security incidents
Photo Data and AI Processing
Your photos belong to you. We process images solely to deliver the AI enhancements you request. Here is how we handle your photos:
- Photos are encrypted during upload and storage
- Processed images are retained for 30 days to allow downloads
- After 30 days, images are permanently deleted from our servers
- We do NOT use your photos to train our AI models without explicit opt-in consent
- Enterprise customers can request immediate deletion upon job completion
Data Sharing and Disclosure
We never sell your personal data. We may share information with:
- Service Providers: Cloud hosting (US and EU data centers), payment processing (Stripe), analytics (privacy-respecting tools)
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
- With Your Consent: When you explicitly authorize sharing
Data Security
We implement robust security measures including:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls and employee training
- Secure data centers in the United States and European Union
Your Privacy Rights
All Users
- Access your personal data
- Correct inaccurate information
- Delete your account and data
- Export your data in a portable format
- Opt out of marketing communications
EEA and UK Residents (GDPR)
You have additional rights under GDPR including the right to:
- Object to processing based on legitimate interests
- Restrict processing in certain circumstances
- Withdraw consent at any time
- Lodge a complaint with your local Data Protection Authority
Legal basis for processing: Contract performance, legitimate interests, consent, and legal obligations.
California Residents (CCPA/CPRA)
Under California law, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the "sale" or "sharing" of personal information (we do not sell data)
- Non-discrimination for exercising your privacy rights
Data Retention
- Account Data: Retained while your account is active, deleted within 30 days of account closure
- Photos: Deleted 30 days after processing (unless saved to your account)
- Billing Records: Retained for 7 years for tax and legal compliance
- Analytics: Aggregated and anonymized data may be retained indefinitely
International Data Transfers
We process data in the United States and European Union. For transfers from the EEA/UK, we use Standard Contractual Clauses approved by the European Commission.
Children's Privacy
FoodPhoto.ai is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our website. Continued use of the service after changes constitutes acceptance.
Contact Us
For privacy-related questions or to exercise your rights:
- Email: [email protected]
- Address: FoodPhoto.ai, Privacy Team, 123 AI Street, San Francisco, CA 94102, USA
For EEA/UK residents, you may also contact your local Data Protection Authority.