Privacy Policy
The controller of your data is [LEGAL ENTITY], [REGISTERED ADDRESS] (“we”). This page says what we collect when you use Cutstack, why, for how long, and what you can do about it. Write to help@trycutstack.com for anything privacy-related.
1. Your photos
- What. The photos you upload, the cutouts and edited results, and the technical data needed to process them (dimensions, format, the automatic quality score).
- Why. To do what you asked: remove the background and give you the result. Legal basis: performance of the contract.
- Where. Uploads are received and stored on our servers in the EU. Each photo is sent to a cloud provider that runs the AI model, for processing only; the provider does not keep it after the response and does not use it to train anything.
- How long. A batch and every file in it are deleted about two hours after it finishes, or sooner if you delete it. Metadata (EXIF) is stripped from every result, so nothing about your camera or location leaves with the photo.
- Who sees them. No one. Reports are checked by comparing pixels, not by a person looking at the photo. We may look at a photo only if you ask us to, for support.
2. Your account
- What. E-mail address, a password hash or your Google account identifier, sign-in times, and your credit balance and its history (every reservation, charge, refund and purchase).
- Why. To let you sign in, keep your credits, and answer questions about them. Legal basis: performance of the contract; for the credit ledger, also our legal obligation to keep accounting records.
- How long. As long as the account exists. When you delete the account, the personal data is removed within 30 days; purchase records are kept for as long as tax law requires, without the link to your account.
3. Purchases
Payments are handled by our payment provider, [PAYMENT PROVIDER], which receives your card details directly; we never see them. We receive a confirmation, the amount, and the e-mail address. Marketplace licences (for example AppSumo) send us a licence code and the buyer e-mail so the code can be attached to your account.
4. Technical data and logs
- Our servers log requests (IP address, time, path, response status) for security and to keep the Service running, and keep them for up to 30 days. Rate limits use the IP address for that window only.
- Errors in the app are reported to us with the page, the batch id and a technical description, never with the photo itself.
- We do not use analytics or advertising trackers, and there are no third-party scripts on the site. The sign-up form may show a Cloudflare Turnstile challenge to block bots; Cloudflare processes the connection data needed for that.
- The app stores a few preferences (for example your last output settings) in your browser only. They never reach our servers.
5. E-mail
We send sign-in links, password resets and confirmations through our e-mail provider, [E-MAIL PROVIDER]. We e-mail you about your account and about the Service when there is something you need to know. No newsletters unless you ask for one.
6. Processors
We use these providers, each under a data processing agreement: [HOSTING PROVIDER] (servers, EU), [DATABASE PROVIDER] (accounts and credits, EU), the AI model provider (processing of photos), [E-MAIL PROVIDER], [PAYMENT PROVIDER] and Cloudflare (bot protection at sign-up). Where a provider is outside the EU, transfers rely on the EU Standard Contractual Clauses.
7. Your rights
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent where processing is based on it. Most of this you can do yourself: the usage page shows your credit history, and the account menu deletes the account. For the rest, e-mail us; we answer within 30 days. You can also complain to your data protection authority; ours is [SUPERVISORY AUTHORITY].
8. Changes
If this policy changes in a way that matters to you, we will say so by e-mail or in the app before the change takes effect. The date at the top is the version you are reading. Our terms of service and refund policy complete this page.