Privacy Policy

This policy explains what PhotoFig collects, how we use it, how long we keep it, and the choices you have when using the product image editor, batch workflows, and API.

1. Information We Collect

We collect information you provide directly and information generated by your use of PhotoFig, including:

• Account details such as name, email address, password hash, email verification state, workspace membership, and account settings.
• Uploaded images, generated outputs, thumbnails, masks, batch files, templates, workflow settings, API jobs, webhook configuration, and related metadata.
• Usage records such as AI credit usage, background removals, batch exports, storage usage, API key metadata, rate-limit events, and audit-relevant timestamps.
• Technical data such as IP address, user agent, device/browser details, request logs, error logs, and security events.
• Billing information handled by Stripe, including subscription status, customer identifiers, payment status, invoices, and limited payment metadata. We do not store full card numbers.

2. How We Use Your Information

We use the information we collect to:

• Provide image editing, background removal, AI shadow, AI background, batch, template, API, and webhook features.
• Store your library, generated outputs, workspace data, usage counters, and account preferences.
• Authenticate users, protect accounts, enforce quotas, detect abuse, debug failures, and keep the service reliable.
• Send transactional emails such as verification, password reset, invite, billing, and batch completion messages.
• Process payments, manage subscriptions, comply with legal obligations, and respond to support requests.
• When you mark a cutout as wrong, keep a copy of that photo and our cutout, together with the reasons you selected, to evaluate and improve our background removal.

3. Data Controller

PhotoFig is operated by Karolis Tamutis (Einzelfirma), Walderstrasse 48, 8630 Rüti, Switzerland. For privacy requests, contact privacy@photofig.com.

4. Data Retention

Uploaded images and generated assets are retained according to your plan limits, storage quotas, and cleanup settings. Finished API job artifacts are short-lived and may be deleted automatically after the API retention window. Batch artifacts may expire before the batch record. You can delete uploads, designs, batches, catalogs, notifications, API keys, and your account where those controls are available in the app. Copies kept from cutouts you mark as wrong are deleted when you undo the mark or delete your account.

5. Sharing of Information

We do not sell your personal information. We share information only where needed to run PhotoFig, comply with law, protect the service, or with your direction:

• Infrastructure, storage, email, monitoring, payment, analytics, and support providers that process data for PhotoFig, including Cloudflare (hosting, content delivery, security), Stripe (payments), and Postmark (transactional email).
• Webhook endpoints, integrations, or API destinations that you configure.
• Authorities, courts, or counterparties when required by law or necessary to protect rights, safety, security, or service integrity.
• Successors in connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of your information.

6. Cookies and Local Storage

PhotoFig uses browser storage and similar technologies to keep you signed in, remember preferences, support editor state, protect against abuse, and understand product usage. Blocking browser storage may prevent parts of the app from working. We use self-hosted Umami for pageviews, product events, and page performance. When you are signed in, we link this activity across sessions using your internal PhotoFig user ID, without sending your name, email, images, filenames, or prompts. We exclude URL query strings, fragments, and private share, batch and catalog identifiers. Analytics respects Do Not Track, Global Privacy Control, and the Umami browser opt-out.

7. Your Rights

Depending on where you live, you may have rights to:

• Access, correct, export, or delete personal data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Complain to a data protection authority.

You can exercise many controls in the app. For anything else, contact privacy@photofig.com.

8. Security

We use technical and organizational measures designed to protect your information, including encrypted transport, access controls, authentication, monitoring, backups, and separation between customer-owned assets and internal system data. No online service can guarantee perfect security.

9. International Processing

PhotoFig and its providers may process information in countries other than where you live. Where required, we use appropriate safeguards for international transfers.

10. Children's Privacy

PhotoFig is not intended for children. Do not use PhotoFig if you are under the minimum age required to consent to online services in your country.

11. Changes to This Policy

We may update this policy as PhotoFig changes. We will update the "Last updated" date and, for material changes, provide notice through the service or another reasonable channel.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, contact privacy@photofig.com.