Privacy Policy
Last updated: January 20, 2026How we manage and protect your data.
1. Introduction
Welcome to PhotoStaging.ai ("we", "our", "us"), a project operated by an individual entrepreneur based in Portugal.
Your privacy and the protection of your personal data are important to us. This Privacy Policy explains how personal data is collected, used, shared, and protected when you use our services, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By accessing or using https://photostaging.ai, you agree to this Privacy Policy.
2. Data Controller
For the purposes of the GDPR, the data controller is:
PhotoStaging.ai
Operated by Filipe Bernardo
Location: Portugal
Contact email: hello@photostaging.ai
3. Personal Data We Collect
We may collect and process the following categories of personal data:
🧾 Account Information
- Name
- Email address
- Profile picture (when using Google Login)
📊 Technical Information
- IP address
- Browser and device type
- Date and time of access
- Session identifiers
📤 User Content
- Images uploaded by users
- Generated images and videos created through the platform
🧠 Usage Data
- Platform usage logs
- Feature interaction data
4. How We Collect Data
Personal data is collected when:
- You create an account or log in (including via Google Login)
- You upload images or use content generation features
- You interact with the platform
- Automatic technical processes (logs, security, analytics)
5. Purpose and Legal Basis for Processing
Personal data is processed for the following purposes:
| Purpose | Data | Legal Basis |
|---|---|---|
| Account creation and authentication | Name, email | Performance of a contract |
| Providing AI image and video generation services | User content | Performance of a contract |
| Service security and improvement | Technical & usage data | Legitimate interest |
| User communication | Performance of a contract / Consent |
6. Use of Third-Party Services
To operate PhotoStaging.ai, we rely on third-party service providers that may process personal data on our behalf:
🔐 Authentication
Google - Used to allow users to sign in securely.
🗄️ Infrastructure & Storage
- Supabase - User authentication, database, and backend services
- Bunny.net - Storage and delivery of uploaded and generated images
⚙️ AI Processing APIs
Third-party APIs used to generate images and videos. These providers may process content and data in accordance with their own privacy policies and contractual obligations.
All third parties are selected carefully and, where required, are subject to data processing agreements.
6.1. Google User Data
When you use Google Login to access PhotoStaging.ai, we collect the following Google user data:
- Name - Your full name as provided by your Google account
- Email address - Your Google email address for account creation and communication
- Profile picture - Your Google profile picture for display in your account
How We Use Google User Data
We use the Google user data collected solely for the following purposes:
- To create and authenticate your PhotoStaging.ai account
- To provide you with access to our services
- To communicate with you regarding your account and our services
Sharing and Transfer of Google User Data
We do not share, sell, or transfer your Google user data to any third parties. The Google user data we collect is:
- Stored securely in our Supabase database for account management purposes only
- Not shared with any external parties, advertisers, or data brokers
- Not used for advertising, marketing, or any purpose other than providing and improving our application's functionality
Data Protection
We implement appropriate technical and organizational security measures to protect your Google user data, including:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security assessments and updates
7. International Data Transfers
Some third-party providers may process data outside the European Union (EU/EEA).
When personal data is transferred internationally, appropriate safeguards are applied, such as:
- EU Standard Contractual Clauses (SCCs), or
- Transfers to countries with an adequacy decision by the European Commission.
8. Data Security
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, alteration, loss, or misuse.
9. Data Retention
Personal data is retained only for as long as necessary to provide the service and fulfill legal obligations.
- Account data is retained while the account remains active
- User content may be deleted upon account deletion or user request, unless legally required otherwise
10. Your Rights
Under the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
- Right to lodge a complaint with the Portuguese supervisory authority (CNPD)
To exercise your rights, please contact us using the details below.
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. Any changes will be published on this page and the "Last updated" date will be revised accordingly.
13. Contact
For questions regarding this Privacy Policy or your personal data, please contact:
Email: hello@photostaging.ai
Country: Portugal