Privacy Policy

Last updated: 2025‑10‑03

This Privacy Policy explains how we collect, use, and protect your information when you use PhotoAi4you and its services, including the PhotoAi4you_bot for Telegram, aiphoto.fi web-site.

1. Who We Are

This Telegram bot (“Service”) is operated by Mirlan Dzhumagulov, based in Finalnd. We act as the “data controller” under the EU General Data Protection Regulation (GDPR).

2. What Data We Collect

• Telegram identifiers: user ID, chat ID, username (if public).
• Prompts and text inputs you provide to generate or edit images.
• Photos you upload: processed in memory, not stored. We keep only the Telegram file ID until the job is complete.
• Generated outputs: stored in Google Cloud Storage (GCS) under your job ID.
• Payments: Polar.sh processes your payment details. We only receive confirmation metadata (transaction ID, amount, status, user ID).
• Logs: we log requests and errors, but never raw image bytes.
• If you provide an image or prompt for video generation, the input is processed temporarily in memory and sent to Google Gemini Veo 3. We do not permanently store your input images or videos; only the generated outputs are stored for up to 30 days.

3. How We Use Your Data

• To generate and edit images using Google’s Gemini 2.5 Flash Image (“Nano Banana”) model.
• To deliver results back to you in Telegram.
• To manage credits, billing, and fraud prevention.
• To comply with our legal obligations.
• Your inputs (text prompts, optional images) are used to generate videos via Google Gemini Veo 3. Outputs (video files) are saved in Google Cloud Storage until they expire.

4. Where Data is Processed

• Image processing is performed via Google Gemini API.
• Infrastructure is hosted on Google Cloud Platform (GCP) and Supabase, in EU regions where possible.
• Polar.sh handles payments in compliance with EU/UK laws.

Google, Supabase and Polar.sh act as data processors under GDPR with signed Data Processing Agreements (DPAs).

5. Legal Basis

• Consent (when you upload a photo for editing).
• Contract (to deliver purchased services).
• Legitimate interests (fraud prevention, security).

6. Data Retention

• Inputs (uploaded media): never stored, only held in memory for processing.
• Outputs(images and videos): stored up to 30 days in GCS for your convenience. After that, they are deleted automatically. We recommend saving your outputs locally.
• Payment and account data: retained as required by tax/accounting law.

7. Your Rights

If you are in the EU/EEA, UK, or Switzerland, you have the right to:

• Access your personal data.
• Request correction or deletion.
• Withdraw consent at any time.

8. Sharing

We do not sell or share your data with third parties, except:

• Google Cloud (image generation & storage).
• Supabase (user data storage).
• Polar.sh (payments).
• As required by law or to prevent abuse.

9. Children

This Service is not for minors under 18. Do not upload or generate videos involving minors, medical data, sexual or political content. Videos of children are strictly prohibited.

10. Other

All generated videos are AI-created and may include watermarks or identifiers as applied by Google Gemini Veo 3.

11. Changes to This Policy

We may update this policy occasionally. We will notify users through our bot or site if significant changes occur.