Terms of Service

Privacy Policy

Last updated and effective

This Privacy Policy explains what personal data UnrealPhotos.io collects, why, and what rights you have. The data controller is Digital Corner ApS (CVR DK42289159), Denmark ("UnrealPhotos", "we", "us"). This policy forms part of our Terms of Service.

1. What we collect

Account data. Name, email address, gender if you provide it, login identifiers, and the settings you choose.

Photos and generated content. The photos you upload, the images we generate for you, and the prompts, templates, and settings you use. Uploaded photos contain images of faces. We process them to create a personalised model and to generate images for you. We do not use them to identify you or anyone else, and we do not build a face-recognition database.

Payment data. Our payment processor collects your payment details directly. We never see or store full card numbers. We receive transaction details such as the amount, plan, date, the last four digits of your card, and your billing country.

Usage and device data. IP address, browser and device type, pages viewed, features used, generation activity, approximate location derived from IP, and diagnostic and error data.

Communications. Messages you send to support and your responses to surveys or feedback prompts.

Referral and affiliate data. If you arrive via a referral link or take part in our affiliate programme, we record the referral source and the information needed to calculate and pay commissions.

2. Why we process it

We use your data to:

  • provide, operate, secure, and support the Service, including generating images and delivering purchases (performance of contract);
  • process payments, manage subscriptions and credits, prevent fraud, handle disputes, and keep required financial records (contract and legal obligation);
  • understand how the Service is used, measure and improve features, run experiments, and fix problems (legitimate interest);
  • send transactional emails such as receipts, account notices, and support replies (contract), and marketing emails you can opt out of at any time (consent or legitimate interest, depending on your location);
  • enforce our Terms, detect abuse and prohibited content, and comply with legal obligations and lawful requests (legitimate interest and legal obligation).

We do not sell your personal data. We do not use your photos in our marketing without your explicit consent.

3. Who we share it with

We use service providers who process data on our behalf under contract. They include providers of:

  • payment processing (Stripe);
  • authentication and account management (Clerk);
  • hosting, infrastructure, storage, and content delivery (Vercel, MongoDB Atlas, Cloudflare);
  • AI model and image generation compute (for example Google, OpenAI, Replicate, and RunPod), which process uploaded and generated images only to perform the generation we request;
  • analytics and error monitoring (PostHog);
  • email delivery (Loops, Resend).

This list may change as we change providers. We may also disclose data where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data.

4. International transfers

We are based in Denmark. Our providers may store or process data outside your country, including in the United States. Where data leaves the EU/EEA or UK, we rely on adequacy decisions, the EU Standard Contractual Clauses, or another lawful transfer mechanism.

5. Retention

We keep your account data, uploaded photos, and generated images for as long as your account is open, so that you can access your content. When you delete your account, or ask us to, we permanently delete your login, photos, generated images, and personal model. Deletion is irreversible.

We keep transaction records for as long as accounting and tax law requires, and we may keep limited data needed to enforce our Terms, resolve disputes, or prevent abuse, such as records of banned accounts.

Aggregated or anonymised data that no longer identifies you may be kept indefinitely.

6. Security

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and private storage for your content. No system is completely secure, and we cannot guarantee absolute security.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, attribute referrals, run experiments, and measure how the Service is used. Analytics data is processed through our own domain and used only for the purposes above. You can control cookies through your browser settings; disabling them may affect how the Service works.

8. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to certain processing;
  • receive a copy of your data in a portable format;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a supervisory authority. In Denmark this is Datatilsynet (www.datatilsynet.dk).

To exercise any of these rights, or to delete your account, email support@unrealphotos.io. We may ask you to verify your identity first. We respond within the time required by law.

9. Children

The Service is for adults only. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page and, for significant changes, may notify you by email or in the app.

11. Contact

Digital Corner ApS, CVR DK42289159, Denmark Email: support@unrealphotos.io Website: https://www.unrealphotos.io