Privacy Policy
This Privacy Policy explains how Fotoly collects, uses, stores, and shares information when you visit the website, create an account, upload images, or purchase a subscription.
Brand information
Fotoly
All services are delivered digitally inside the Fotoly web app. No physical goods are shipped.
Document status
Last updated: March 15, 2026
Most jobs finish in under a minute. Lifestyle scenes, multi-angle views, and AI listing copy can take a little longer.
1. Controller and scope
The operator identified on the Contact page is the controller of the personal information processed through Fotoly. This policy covers website visitors, account holders, and subscription customers.
2. Information we collect
- Account details such as name, email address, authentication identifiers, and subscription status.
- Uploaded files and generated outputs, including processing history, selected settings, and delivery metadata.
- Billing and transaction records provided by our payment processor for subscription management, fraud prevention, and support.
- Technical and operational data such as log data, job status, request timing, and device/browser information needed to secure and improve the service.
3. How we use personal information
- To authenticate users, provide the dashboard, and deliver requested processing workflows.
- To manage subscriptions, payments, invoices, credit usage, refunds, and related customer support.
- To detect abuse, enforce our Terms, maintain platform security, and prevent fraud.
- To monitor service performance, troubleshoot errors, and improve workflow quality.
4. Third-party processors
- Clerk for authentication and account management.
- Stripe for card subscription payments, billing events, and payment-related fraud controls.
- Cloudflare R2 for storage of uploaded and generated image files.
- Google Gemini, Photoroom, and Fal.ai for image analysis, generation, enhancement, or related AI processing.
- Resend for transactional email delivery and Upstash QStash for asynchronous job delivery when needed.
5. Retention
We retain account and billing records for as long as reasonably necessary to operate the service, meet legal obligations, resolve disputes, and enforce our agreements.
Uploaded images, generated outputs, and workflow history may remain available while your account is active unless they are removed through support handling or internal retention rules. If you want data deleted, please contact support. We do not currently promise a self-service deletion workflow for images or accounts.
6. Your requests and rights
- You may request access to, correction of, or deletion of personal information by contacting support from your account email address.
- You may opt out of non-essential product emails. Service and billing communications may still be sent when required to administer your account.
7. Security and cross-border processing
We use reasonable technical and organizational safeguards, including HTTPS/TLS, access controls, and processor-based cloud security tools. No system can be guaranteed to be perfectly secure.
Because our providers may operate in multiple jurisdictions, your information may be processed or stored outside your home jurisdiction when necessary to deliver the service.
8. Policy updates
We may update this Privacy Policy from time to time. The latest version will remain available on this page.