Privacy Policy

This policy explains what AI Photo Transformation ("we") collects when you use AI Photo Transformation, the website at aiphototransformation.com and the app at app.aiphototransformation.com, and what we do with it.

Two kinds of data

Your account data. When you sign up, we decide how your account information is used. This policy covers it.

Your customers' data. When your customers send photos through your HighLevel account, web forms or workflows, you decide what is collected and why. We process that data for you, under your instructions, to provide the service. Your own privacy notice to your customers should cover it.

What we collect

• Account details: your name, email address, company name, password (stored by our authentication provider as a one-way hash) and the settings you choose.
• HighLevel connection: the location IDs and access tokens HighLevel issues when you connect, and the contact details needed to deliver a result (such as a contact ID and phone number).
• Photos and results: the photos your customers send, the AI results, any videos made from them, and the web form answers submitted with them.
• AI keys: the OpenRouter key you connect. We encrypt it before storing it and only ever show its last characters.
• Billing: your plan and invoices. Card details go straight to Stripe; we never see or store your card number.
• Usage and logs: what was processed, when, by which model, and what it cost, plus technical logs such as IP address and browser type, used to run and secure the service.

How we use it

• To run the service: receive photos, transform them, deliver results and show your usage stats.
• To bill you and send account emails such as sign-in links, receipts and service notices.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations.

We don't sell personal data, we don't use it for advertising, and we don't use your photos to train AI models.

Who processes it for us

We use these providers to run the service. Each only receives what it needs for its job.

• Supabase: database, file storage and sign-in (United States).
• Vercel: hosting for the app and this website (United States).
• Stripe: payments and invoices.
• OpenRouter and the AI model providers it routes to: photos and instructions are sent for transformation under your own OpenRouter account and its terms. Free trial edits run on our account.
• HighLevel: receives the results we send back to your contacts, under your HighLevel account.
• Our email provider: sends account emails.
• Your own storage bucket, if you connect one (Amazon S3, Cloudflare R2, Backblaze B2 or Wasabi).

How long we keep it

• Photos, results and videos: 12 months, then deleted. With the extended storage add-on, for as long as you subscribe.
• Account, usage and billing records: while your account is open, and billing records as long as tax law requires.
• Web form answers: while your account is open, unless you or your customer ask us to delete them sooner.

Cookies

This website sets no tracking or advertising cookies. The app uses only the cookies needed to keep you signed in.

Your choices and rights

You can update your account details in the app, and ask us for a copy of your data or to delete it. Depending on where you live, you may also have rights to correct, restrict or object to how we use it. If you are one of our customers' customers, contact the business you sent your photo to; we will help them answer you.

Security

We protect data with encryption in transit and at rest, access controls and audit logs. See our security page for details.

Children

The service is for businesses and is not meant for anyone under 16.

Changes

If we change this policy in a way that matters, we will email account owners before it takes effect.

Contact

Email support@aiphototransformation.com.