Privacy Policy

1. Introduction and scope

This Privacy Policy explains how StickerMe AI ("we", "us", "our") collects, uses, discloses, retains and protects personal data when you visit our website, upload a photo, place an order or otherwise interact with our sticker generation service (the "Service"). This policy applies to all visitors, customers and other users of the Service, regardless of the device or channel used to access it. By using the Service you acknowledge that you have read and understood this policy.

2. Data controller and contact details

StickerMe AI is the data controller responsible for the personal data described in this policy, meaning we determine the purposes and means of processing your personal data. Questions about this policy, or requests relating to your personal data, can be sent through our contact form. Where required by applicable law, we will make available additional contact details for a designated privacy contact or data protection officer through the same channel.

3. Categories of personal data we collect

We collect the following categories of personal data:

• Content you provide. The photo you upload, your chosen language, style selections and any prompt text you enter, used only to generate your sticker pack.
• Contact data. An optional email address, used to send your receipt, order status updates and download link.
• Order and payment data. Order identifiers, timestamps, product selections, and payment confirmation data from our payment processor. We do not collect, see or store your full card number, card verification code, or other sensitive payment credentials, which are handled directly by our payment processor.
• Technical and usage data. IP address, approximate location derived from IP address, browser type and version, device type, operating system, referring page, and interaction data such as pages visited and actions taken, collected automatically through server logs and strictly necessary cookies.
• Communications. Any information you provide when you contact us for support, including the content of your message and any attachments.

We do not intentionally collect special categories of personal data (such as data revealing racial or ethnic origin, health data, or religious beliefs). Please do not include such information in prompts, messages or uploads unless it is incidentally present in a photo of yourself that you have chosen to upload.

4. How we use your personal data and legal basis

We process personal data only where we have a valid legal basis to do so:

• Performance of a contract. Processing your photo, prompt, language selection and order details is necessary to generate and deliver the sticker pack you purchase, to process payment, and to provide customer support relating to your order.
• Legitimate interests. We process technical, security and fraud prevention data on the basis of our legitimate interest in operating a safe, reliable service, preventing abuse, and improving performance, provided this interest is not overridden by your rights and interests.
• Consent. Where you opt in to receive marketing communications, or where we use any non-essential cookie or similar technology, we rely on your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation. We process certain order and payment records to comply with accounting, tax, consumer protection and other applicable legal obligations.

5. How your photo is used

Your upload is stored in private storage that is not publicly accessible and is not indexed by search engines. It is transmitted to our AI processing provider solely for the purpose of generating your sticker pack. We do not use your photo to train, fine-tune or improve any AI model, whether ours or a third party's, and we do not publish, share, license or sell your photo or generated stickers to any third party for their own purposes.

6. Sub-processors and international data transfers

We engage carefully selected third party providers ("sub-processors") to operate the Service, including providers of AI image processing, payment processing, cloud hosting and infrastructure, and email delivery. Each sub-processor is bound by contractual confidentiality and data protection obligations consistent with this policy, and is permitted to process personal data only on our documented instructions and only for the purposes described here.

Where a sub-processor is located, or processes data, outside of your country or region (including outside the European Economic Area), we ensure that the transfer is protected by an appropriate safeguard recognized under applicable data protection law, such as the European Commission's standard contractual clauses, an adequacy decision, or an equivalent lawful transfer mechanism.

7. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Uploaded photos and generated stickers are retained so that you can re-download your pack, and are automatically deleted from active storage after a limited retention window following delivery, or sooner if you request deletion.
• Order and payment records are retained for the period required by applicable accounting, tax and consumer protection law, which may exceed the retention period for the photo itself.
• Technical and security logs are retained for a limited period sufficient to detect, investigate and prevent abuse, fraud and security incidents, after which they are deleted or anonymized.
• Support communications are retained for as long as necessary to resolve your request and for a reasonable period afterward for quality assurance and dispute resolution purposes.

You can request immediate deletion of your photo and generated stickers at any time from your results page, or through our contact form, subject to the legal retention requirements described above for order and payment records.

8. Data security

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure or destruction, including encryption of data in transit and at rest, access controls restricting internal access to personnel who need it to operate the Service, time-limited signed URLs for downloads, and unguessable order identifiers. No method of electronic storage or transmission is completely secure, and while we work to protect your personal data we cannot guarantee its absolute security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the competent supervisory authority and affected individuals without undue delay, in accordance with applicable law.

9. Access to your results

Your results page is protected by a secret, unguessable link. Order identifiers are not sequential or predictable, and download links are time-limited signed URLs that expire after a limited period to reduce the risk of unauthorized access.

10. Automated decision-making

The generation of your stickers is performed automatically by AI models based on the photo and prompt you provide. This automated processing produces a creative output (the stickers) and does not produce legal effects concerning you or similarly significantly affect you within the meaning of applicable data protection law. We do not use automated processing to make decisions about your eligibility for the Service, pricing, or refunds without human involvement where such a decision would significantly affect you.

11. Cookies and similar technologies

We use only cookies and similar technologies that are strictly necessary to operate checkout, maintain your session, remember your order status, and keep the Service secure against fraud and abuse. We do not use these technologies to build advertising profiles or to track you across unrelated third party websites. Where we introduce any non-essential analytics or marketing technology in the future, we will request your consent before doing so, in accordance with applicable law.

12. Children's privacy

The Service is not directed at, and is not intended for use by, children below the age of consent applicable in their jurisdiction. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without appropriate consent, please contact us through our contact form so that we can investigate and delete such data.

13. Your rights

Depending on your location and applicable law, you may have some or all of the following rights in relation to your personal data:

• The right to be informed about how your personal data is processed.
• The right to request access to a copy of your personal data.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request erasure of your personal data, subject to applicable legal retention requirements.
• The right to request restriction of processing, or to object to processing carried out on the basis of legitimate interests.
• The right to data portability, where technically feasible.
• The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing.
• The right to lodge a complaint with your local data protection supervisory authority.

You can exercise these rights at any time by using our contact form. We may need to verify your identity before responding to certain requests. We aim to respond to all requests within 30 days, or such other period as required by applicable law, and will inform you if we need additional time due to the complexity or number of requests.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable legal requirements. The "Updated" date at the top of this page reflects the date of the latest revision. Where changes are material, we will take reasonable steps to notify you, such as displaying a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

15. Contact

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us through our contact form.