Privacy Policy

1. Introduction

PhotoRealify is operated by VECTORSPELL LTD ("we", "our", or "us"), a company registered in England and Wales with company number 17167562. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when registering for an account, including:

• Name and email address
• Payment information (processed securely by our payment processor)
• Account preferences and settings

We do not store full credit card numbers or full payment credentials on our servers. Payments are processed through Stripe Managed Payments. For eligible transactions, Link may act as the merchant of record, and checkout, receipts, invoices and subscription management may be provided by Stripe or Link. Stripe and Link process payment data under their own privacy terms. We may receive limited billing information such as your name, email address, billing address, payment status, subscription status, invoices, receipts, and partial card details such as brand and last four digits.

Your Images

When you use the Service, we collect the images you upload and the results generated from them, solely to provide the conversion you requested and to keep them in your gallery for you.

Usage Information

We automatically collect certain information when you use our platform:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and feature interactions

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Process transactions and send related information
• Send administrative information and updates
• Respond to inquiries and offer support
• Improve our platform and develop new features
• Monitor and analyze usage patterns

4. Data Security

We implement industry-standard security measures to protect your data:

• Connections to the Service are encrypted in transit (HTTPS/TLS)
• Your uploaded images and results are stored on our servers and are only accessible through your account; they are never publicly accessible
• Passwords are stored as one-way hashes, sessions are authenticated, and administrative access is restricted by role

5. Your Images and Results

Your uploaded images and generated results are yours. We do not:

• Share your uploads or generated results with other users
• Sell your images or results
• Use your images to train models

To process your requests, your uploaded images are processed by third-party AI infrastructure providers solely to deliver the requested conversion, as described in the "AI processing" section below. Aside from this, your images are kept confidential and are not used for unrelated purposes.

Your uploaded images and their results are stored on our servers and kept in your gallery, so you can view and download them later. They remain stored until you delete them: deleting an image from your gallery permanently deletes the original upload, its result and the intermediate files created while processing it. Deleted images may remain in our backup copies for a limited period until those backups are overwritten. To have all of your images deleted together with your account, contact us at [email protected].

If you use PhotoRealify without creating an account, your images are kept in the same way under a guest session, and you can delete them from the gallery while that session is active.

6. AI Processing

When you submit an image, it may be processed by third-party AI infrastructure providers solely to provide the requested upscaling, subject to our data-processing arrangements and this Privacy Policy.

7. Third-Party Services

We may share information with third-party service providers who assist us in operating our platform, including:

• Payment processing (Stripe, including Stripe Managed Payments and Link)
• Cloud and compute infrastructure providers
• Third-party AI infrastructure providers (for AI-assisted upscaling)

These providers are contractually obligated to protect your information.

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or request restriction of certain processing
• Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office, ICO)

We send emails needed to run your account (such as email verification, password reset and credit notices), and occasional emails about using PhotoRealify - for example a reminder if you haven't converted an image yet, or a note after a long period of inactivity. We do not send newsletters and do not share your email address with others for their marketing. You can ask us to stop the occasional emails at any time by contacting [email protected].

9. Lawful Bases for Processing

We process your personal data under the UK GDPR on the following lawful bases:

• Performance of a contract - to create and maintain your account, deliver the Service, and process subscription billing.
• Legitimate interests - to operate, secure, monitor, and improve the Service and prevent fraud or abuse, balanced against your rights.
• Legal obligation - to comply with tax, accounting, and other legal requirements.
• Consent - where we specifically ask for it; you may withdraw consent at any time.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy. Account and profile data is retained for the life of your account and deleted or anonymised within a reasonable period after account closure, unless we are required to keep it longer. Billing and transaction records are retained for the period required by applicable tax and accounting law. Uploaded images and generated results are kept until you delete them or ask us to delete your account, as described in Section 5.

11. International Transfers

Some of our service providers (for example, cloud and compute infrastructure and AI infrastructure providers) may process data outside the United Kingdom or European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to Standard Contractual Clauses.

12. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data-protection supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), ico.org.uk.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]

Company: VECTORSPELL LTD, registered in England and Wales. Company number: 17167562.

Registered office: Prime Apartments 483 Green Lanes, London, N13 4FG, United Kingdom.