1. Who We Are

PlatedLens is an AI food photography service operated from Slovakia. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR). Contact: platedlens@gmail.com

2. Data We Collect

Account data: name and email address when you register
Authentication data: hashed password or Google OAuth token
Payment data: processed by Stripe — we store only your Stripe customer ID, never card details
Images: photos you upload for processing; these are used only to generate your styled result
Usage data: generation history, token balance, IP address for free-tier abuse prevention

3. How We Use Your Data

To provide and operate the PlatedLens service
To process payments and manage your token balance
To send transactional emails (receipts, account notices)
To prevent fraud and abuse of the free generation tier
To improve the service based on usage patterns

We do not sell your data to third parties. We do not use your images to train AI models.

4. Legal Basis (GDPR)

Contract: processing your account and payments
Legitimate interest: fraud prevention, service security
Consent: any optional marketing communications

5. Third-Party Services

Stripe — payment processing (privacy policy)
Google OAuth — optional sign-in (privacy policy)
Black Forest Labs — AI image generation API; your images are sent to their API to produce results

6. Data Retention

We retain your account data for as long as your account is active. Generation history is kept for up to 12 months. You may request deletion of your account and all associated data at any time via the settings page or by emailing us.

7. Your Rights (GDPR)

As an EU resident you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing
Data portability

To exercise any of these rights, email platedlens@gmail.com

8. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

9. Security

Passwords are hashed using bcrypt and never stored in plain text. All data is transmitted over HTTPS. We take reasonable technical measures to protect your data, though no system is 100% secure.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

11. Contact

Questions or requests: platedlens@gmail.com