Privacy policy

aiModelka turns photos of your clothing items into product photos on a model. This policy explains, in plain words, what we keep, what leaves our servers, how long anything is stored, and how you erase it.

It covers the aiModelka website and web application. Questions go to [email protected].

What we store

Your account. Your email address, your name if you enter one, and either a password (kept only as a cryptographic hash — we never store the password itself) or the identifier of the Google account you signed in with. Alongside it: whether your email is confirmed, your interface language, your country, the moment you accepted the terms of service, and — if you agreed to hear about news and offers — the moment you gave that agreement.

Your photos and the photos we make. The item photos you upload, the photo sessions you create, the photo options generated in them, the larger sizes and crops made from those options, the brand models you create together with their reference portraits, and candidate portraits from model creation.

Your settings. Whether the visible "created with AI" label is on, your watermark (its text or the logo file you uploaded, and where it sits), and your export size presets.

Your credit history. Every credit granted or spent, with the reason and the moment it happened. This is the record of what you paid for and what you received; it is what lets us answer "where did my credits go".

Sign-in sessions. Long-lived sign-in tokens for the browsers you are signed in on, and one-time codes sent to your email for confirming an address or resetting a password.

API keys, if you ever create them for the WooCommerce plugin.

If you left your email address in the WooCommerce plugin waiting list, we keep that address and the language of the page you left it on — nothing else.

We do not collect analytics about your behaviour, we do not profile you, and we do not sell or share your data with advertisers.

How your photos are processed

Making a photo is not something our servers can do alone. When you press "Create photo", the item photos for that session, the pose and background references, and the brand model's reference portraits are sent to Google's Gemini API, which generates the images and returns them to us. We store the result; Google receives the material needed to produce it.

Google states for the paid tier we use: "Google doesn't use your prompts … or responses to improve our products." The applicable terms are the Gemini API Additional Terms of Service.

Every image produced this way carries SynthID, an invisible machine marking embedded by Google that identifies the image as AI-generated. It is not visible to the eye, it survives ordinary editing, and we do not remove it. The separate visible "created with AI" label is your own setting, described below.

We use no other processor for image generation. Your files — the photos you upload and the photos we make — are kept in Cloudflare R2 object storage, in a bucket located in the European Union. Cloudflare stores the files on our behalf and does not use them for anything else.

How long we keep it

Until you delete it. Photo sessions, item photos, generated photos, brand models and settings live for as long as your account does, or until you erase them yourself.

Candidate portraits: 14 days. Sets of candidate faces made while you create a brand model are deleted automatically two weeks after they were made; the face you picked stays as part of your model. Photo options, larger sizes and crops are never deleted automatically.

Payment and credit records: 5 years. Records of payments and of credits granted and spent are accounting records, and the law requires us to keep them. If you delete your account, they stay for 5 years with the link to you removed: the amounts, dates and types of operation remain, your identity does not.

Sign-in sessions: 30 days, or until you sign out. Email confirmation and password reset codes expire within hours.

Deletion is physical. When something is deleted, the files are removed from storage, not merely hidden from the interface.

When we grant the welcome credits or the free Starter period we keep a one-way hash of your email address — not the address — so that the same mailbox cannot claim them twice. It outlives your account and holds nothing else about you.

What you can do

Everything below is available in Account → Data and in the other account sections, at any time, without asking us:

• Erase all your data, keeping the account. Photo sessions, item photos, generated photos, brand models, candidate portraits and your watermark logo are deleted from the database and from storage. Your account, your settings and your credit balance stay. You confirm this by typing the word DELETE.
• Delete the account completely. Everything above, plus your account itself, your settings and your sign-in sessions. Records of payments and credits are kept for 5 years with no link to you, as described above. After this you can no longer sign in, and we cannot restore anything. You confirm this the same way.
• Turn the visible "created with AI" label on or off, and set up or remove your watermark.
• Download your photos — a single photo, or a whole session as an archive — for as long as they are in your account.
• Change your language and country, and your name.
• Turn emails about news and offers on or off. Switching them off withdraws your consent - we erase the moment it was given, and the emails stop.

If you would rather ask us to do any of this, or want a copy of what we hold about you, write to [email protected]. Depending on where you live, local data-protection law may give you further rights — access, correction, erasure, portability, restriction, objection, and the right to complain to a supervisory authority. We honour those requests through the same address.

Emails we send you

Emails about your account always arrive, and you cannot turn them off. Confirming your email address, resetting your password, a notice that your password was changed, a notice that your account was blocked or unblocked. These are not marketing: without them you would not learn what is happening to your own account, and there would be no way to give you back access if you lost it.

Emails about news and offers arrive only if you asked for them. The legal basis is your consent, given by ticking a separate box - during sign-up or later in Account → Profile. The box is never ticked for you: an agreement you did not give is not an agreement. We record the moment you gave it, because this policy changes over time and only the date shows which version you agreed to.

You can withdraw that agreement at any time, and it is as easy as giving it. Either switch off "News and offers by email" in Account → Profile, or use the "Unsubscribe" link in the footer of any such email - that link works without signing in. Withdrawing changes nothing else: your account, your photos and your credits stay exactly as they were, and you keep using the service as before.

We do not send your email address to anyone else for their own mailings, and we do not sell it. Emails are delivered through our mail provider, which sees the address and the message for as long as delivery takes.

Cookies and browser storage

We use three cookies, all of them technical. There are no analytics cookies, no advertising cookies and no third-party trackers, which is why the site does not ask you to accept cookies.

• aimodelka_refresh — keeps you signed in. It is readable only by the server, never by scripts in the page, and lives 30 days.
• aimodelka_session — a single digit that says "this browser is signed in", so the app does not flash a sign-in screen at someone who is already in.
• aimodelka_lang — the interface language you chose, so the site opens in it next time.

The short-lived key that authorises each request lives in the browser's memory only and disappears when you close the tab.

Payments

Card payments are not enabled yet. Plans and credit packs are chosen in Account → Credits and plan; until payments are switched on, choosing a plan there offers the Starter plan free for 30 days instead of charging you. We record which plan you wanted to buy and, if you ask us to, that you want to be told when payments open.

When card payments are switched on, they will be handled by Stripe as payment processor. Card numbers will be entered on Stripe's side and will never reach our servers; we will store only what a purchase record needs — what was bought, when, for how much, and the payment identifier Stripe returns. This section will be updated with the details on the day payments go live.

Security

Access to your data is limited to your account: every photo, session and model is bound to your user identity and is not reachable by other users. Passwords are stored as hashes only. API keys for the Gemini API are held on our server and are never exposed to the browser. Traffic between your browser and our servers is encrypted.

No system is perfect, and we do not claim otherwise. If a breach affects your data, we will tell you at the address on your account.

Children

aiModelka is a tool for selling goods and is not intended for children. Do not use the service if you are under 16.

Changes to this policy

When this policy changes, the version and date at the top change with it. If a change materially affects how your data is handled, we will tell you by email before it takes effect.

Contact

Write to [email protected] with any question about this policy or about your data. We answer in English and Ukrainian.