Privacy Policy
Effective date: May 22, 2026
This Privacy Policy explains how APPWILL COMPANY LTD ("we", "us", or "our") collects, uses, and protects your personal information when you use the Picify service available at picify.io and app.picify.io (the "Service").
1. Data Controller
APPWILL COMPANY LTD, Limassol, Cyprus.
Email: [email protected]
2. What Data We Collect
- Account data (when you sign in via Google): name, email address, profile picture, and Google account identifier.
- Payment data: transaction details processed via Stripe. We do not store card numbers or full payment credentials — these are handled exclusively by Stripe.
- User content: product images, descriptions, references, and other materials you upload to the Service.
- Face images: images containing human faces, uploaded for generation purposes (see Section 3).
- Technical data: IP address, browser type and version, device identifiers, cookies, and language settings.
- Usage logs: actions within the Service, generation history, and session events.
3. Processing of Images Containing Faces
If you upload images containing human faces, we process them solely to generate visual content. Please note:
- We do not perform facial identification, match faces against databases, or use facial recognition technology.
- Uploaded images are transmitted to our generation providers (OpenAI, NanoBanana) solely to process your request. These providers operate under their own privacy policies.
- By uploading an image containing a third party's likeness, you confirm you have that person's consent or another lawful basis for such processing.
- Images are retained for the period specified in Section 7 and then deleted.
4. How We Use Your Data
- Providing access to the Service and executing generation requests.
- Processing payments and maintaining billing records.
- Customer support and improving the Service.
- Security, fraud prevention, and abuse detection.
- Compliance with applicable legal obligations.
5. Legal Bases for Processing (GDPR)
For users in the European Union and United Kingdom, we rely on the following legal bases:
- Contract performance — processing necessary to deliver the Service you signed up for.
- Consent — for analytics cookies and non-essential tracking (you may withdraw consent at any time).
- Legitimate interests — security, fraud prevention, and product improvement, where these do not override your rights.
- Legal obligation — where processing is required by applicable law.
6. Third Parties We Share Data With
We share data only to the extent necessary to operate the Service:
- OpenAI — AI image generation
- NanoBanana — AI image generation
- Google — authentication (sign-in)
- Stripe — payment processing
- Hosting and infrastructure providers — service operation
We do not sell your personal data to third parties.
7. Data Retention
- Account data, projects, references, and generated results — 12 months from last activity.
- Face images — 12 months from last activity.
- Technical logs — up to 12 months.
- Payment records — as required by applicable tax and accounting law.
You may request deletion of your data at any time by emailing [email protected]. We will process your request within 30 days.
8. Cookies
Essential cookies (always active):
- Session management and authentication
- Security and abuse prevention
- User preference storage
Analytics cookies (require consent):
- Usage analytics to help us improve the Service
You will be asked for consent on your first visit. You may withdraw consent or delete cookies via your browser settings at any time. Disabling essential cookies may limit Service functionality.
9. Your Rights
All users:
- Request access to your personal data and receive a copy.
- Request correction or deletion of your data.
- Withdraw consent for optional processing at any time.
EU and UK users (GDPR):
- Right to data portability.
- Right to restrict or object to processing.
- Right to lodge a complaint with your local supervisory authority.
California residents (CCPA):
- Right to know what personal information we collect and how it is used.
- Right to delete your personal information.
- Right to opt out of the sale of personal information. We do not sell personal data, so this right is automatically satisfied.
- Right to non-discrimination for exercising your privacy rights.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Security
We apply industry-standard technical and organizational measures — including encryption in transit and at rest — to protect your data from unauthorized access or disclosure.
11. Children
The Service is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available on this page with the effective date. For material changes, we will notify you via email or an in-Service notice at least 10 days before they take effect.
13. Contact
APPWILL COMPANY LTD
[email protected]
14. Related Documents
- Terms of Service — rules for using the Service
- Refund Policy — payments and refunds