Privacy Policy

1. Introduction

Shopframe ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered product photo enhancement service.

2. Information We Collect

Account Information

• Email address
• Name (if provided)
• Password (encrypted)

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. Stripe may collect payment information in accordance with their privacy policy.

Images

We store images you upload for processing. Original and processed images are stored securely and associated with your account.

Usage Data

We collect anonymous usage analytics to improve our service, including pages visited and features used. This data cannot identify you personally.

3. How We Use Your Information

• To provide and maintain our service
• To process your image enhancements
• To process payments and manage subscriptions
• To communicate with you about your account
• To improve our service

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. Images are stored on Vercel Blob Storage. Account data is stored in Supabase with row-level security policies.

5. Third-Party Services

We use the following third-party services:

• Supabase - Authentication and database
• Stripe - Payment processing
• Google AI (Gemini) - Image processing
• Vercel - Hosting and storage

Each service has their own privacy policy governing their use of data.

6. Cookies

We use strictly necessary cookies for authentication purposes only. These cookies are essential for the website to function and cannot be disabled. We do not use tracking or marketing cookies.

7. Lawful Basis for Processing

Under UK GDPR we rely on the following lawful bases to process your personal data:

• Contract — processing necessary to provide the Shopframe service you have signed up for (account creation, image processing, subscription management).
• Legitimate interests — keeping the service secure, preventing abuse, and improving reliability.
• Legal obligation — retaining payment and tax records as required by UK law.

8. Your Rights

Under UK GDPR you have the following rights:

• Access (Art. 15) — request a copy of the personal data we hold about you.
• Rectification (Art. 16) — ask us to correct inaccurate or incomplete data.
• Erasure (Art. 17) — delete your account and all associated data at any time from your account settings page, or by contacting support. Deleting your account cancels any active subscription and removes your stored images immediately.
• Restriction (Art. 18) — ask us to limit how we use your data.
• Portability (Art. 20) — receive your data in a machine-readable format.
• Object (Art. 21) — object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.
• Complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data properly.

For access, rectification, restriction, portability, or objection requests, email support@shopframe.art. We will respond within one month.

9. Data Retention

We retain your account data for as long as your account is active. Images are retained until you delete them or close your account. When you delete your account, your personal data, projects, and stored images are removed immediately. Payment records held by Stripe are retained as required by UK tax law (typically 6 years).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@shopframe.art