Privacy Policy

At Vistae Photography, we prioritize the protection of our users' privacy. This privacy policy explains how your personal data is collected, used, and protected when you use our website and mobile applications. By using our services, you agree to the terms described in this policy.

1. INFORMATION WE COLLECT

1.1. Account Information: Information you provide during registration such as name, surname, email address, and, where applicable, phone number.

1.2. Photos: Photos you upload for AI concept generation. These photos are used solely to create concept photos tailored for you and are not used for any other purposes. On Android devices, our app may request the READ_MEDIA_IMAGES permission solely so that you can select a photo from your device for processing. The app only accesses the specific image you choose and does not scan or access other photos or media files on your device.

1.3. Device Information: Technical information such as device model, operating system, IP address, language, and similar details.

1.4. Device Identifier for Login: A pseudonymous device-based identifier (for example a randomly generated ID or installation ID) that we use to create or maintain your session, authenticate you, and help protect against fraud or misuse. This identifier is not used for personalized advertising or for tracking you across other apps.

1.5. Usage Information: Your activities, preferences, and interactions within the application (for example: screens you view, buttons you tap, and actions you complete).

1.6. Cookies and Tracking Data: Information collected through cookies, pixels, SDKs, and similar tracking technologies for analytics, performance, and to measure the effectiveness of our own marketing activities (such as campaign performance). We do not use these technologies to serve in-app third-party ads based on an advertising identifier.

2. PURPOSES OF USING INFORMATION

2.1. Service Provision: To provide you with a high-quality AI photo generation and concept creation service and related features.

2.2. Personalization: To offer concepts, recommendations, and user experience tailored to your preferences.

2.3. Security: To ensure the security of your account, protect against fraud and abuse, and prevent unauthorized access.

2.4. Communication: For important updates, notifications, transactional messages, and customer support.

2.5. Analytics and Improvement: To analyze anonymized or pseudonymized usage data and improve the performance, stability, and usability of our services.

2.6. Marketing and Campaign Measurement: To understand how users discover and use our services, and to measure the performance of our own marketing campaigns (for example, from app install ads), where permitted by law and your settings. We do not show third-party ads inside the app and we do not use device advertising identifiers for personalized ad targeting.

3. OUR PHOTO PROCESSING AND PROTECTION POLICY

3.1. Temporary Storage: Photos you upload are stored on our servers or on secure cloud infrastructure only for the period necessary to perform AI processing.

3.2. Automatic Deletion: Immediately after processing is complete, your original photos and intermediate files are automatically deleted from our systems within a maximum of 24 hours, unless a longer period is required by law or you explicitly request otherwise.

3.3. No Secondary Use: Your photos are not used for model training, marketing, advertising, or any secondary purpose without your explicit consent.

3.4. Encryption: All transfers of photos and personal data between your device and our servers are protected with SSL/TLS encryption.

3.5. User Responsibility and Rights: Users are solely responsible for the photos they upload to the app and for any images generated from those photos (including concept images). By uploading content, you represent and warrant that you have the necessary rights and consents (including permissions from individuals depicted) and that your content does not infringe the rights or privacy of others and does not violate applicable law. You may contact us at any time to request deletion of your content and associated data.

4. CHILD PRIVACY

4.1. Our services are primarily intended for parents or legal guardians, not for direct use by children. We do not knowingly allow children to create accounts or use our services without parental/guardian involvement.

4.2. Protecting children's photos and personal data is our utmost priority. We apply additional security measures to any photos that may depict minors under the age of 18.

4.3. Children's photos are never archived, retained for profiling, or used for training AI models or advertising. They are processed only to create the requested concept images and are deleted afterwards as described in Section 3.

4.4. Children's photos are not processed without the consent of a parent or legal guardian. By uploading photos of a child, you confirm that you are the parent or legal guardian of the child or that you have obtained the necessary legal permission.

4.5. Example child concept images displayed in the app or on our website are either synthetic, stock, or anonymized (for example, with blurred faces) so that individual children cannot be identified.

4.6. If you believe that we have collected or processed data from a child without valid parental consent, please contact us immediately at info@vistaephotography.com, and we will promptly delete the relevant data.

5. DATA SECURITY

5.1. Technical Measures: Your data is protected with industry-standard encryption, secure server configurations, and network protection measures.

5.2. Access Control: Only authorized personnel and service providers who need access to provide the service can access your data, and they are bound by confidentiality obligations.

5.3. Regular Audits: Our systems and security measures are regularly reviewed and updated to address new risks and vulnerabilities.

6. THIRD-PARTY SERVICES

6.1. AI and Cloud Providers: We may use third-party AI processing and cloud infrastructure providers to perform photo transformations. These providers process data only on our instructions, only for the purpose of providing the service to you, and are contractually required to delete data after processing and to maintain appropriate security.

6.2. Payment Processors: In-app purchases are processed via secure payment providers such as Google Play Billing. We do not store your full payment card details on our servers. Payment processors are responsible for processing your payment data in accordance with applicable laws and security standards (such as PCI-DSS).

6.3. Analytics and Measurement Services: We may use third-party analytics and measurement services (for example, Google Analytics, Firebase, or Meta) to analyze aggregated usage data and to understand how users interact with our services and marketing campaigns. These services may use cookies or similar technologies, but we do not use them to show personalized third-party ads inside the app based on an advertising identifier.

6.4. No Sale of Personal Data: We do not sell your personal data to third parties.

7. DATA RETENTION PERIOD

7.1. Photos: Original photos and intermediate processing files are deleted immediately after AI processing is complete and in any case within a maximum of 24 hours, unless a longer retention period is required by law or you explicitly request storage.

7.2. Account Information: Retained for as long as your account remains active. If you delete your account, your personal data will be deleted or anonymized, except where we are required to keep certain data to comply with legal obligations.

7.3. Transaction Logs: In-app purchase and transaction logs may be retained for a legally required period (for example for tax, accounting, and fraud prevention purposes).

8. USER CONSENT AND DATA PROCESSING (GDPR/KVKK COMPLIANCE)

8.1. Explicit Consent: By using our services, you explicitly consent to the collection, processing, and use of your personal data as described in this privacy policy.

8.2. Data Processing Purposes Include:

• Providing AI photo generation and concept creation services.

• Improving service quality, stability, and personalization.

• Customer support and communication.

• Analytics and performance monitoring (using anonymized or pseudonymized data where possible).

• Measuring the effectiveness of our own marketing campaigns (without serving personalized third-party ads inside the app).

8.3. Advertising and Tracking: We do not show personalized third-party ads inside the app and we do not use the Android Advertising ID (AAID) or similar advertising identifiers for ad targeting across apps. We may use analytics and measurement tools (such as Google Analytics, Firebase, or Meta) to understand aggregated usage patterns and the performance of our own campaigns.

8.4. Withdrawal of Consent: You may withdraw your consent at any time by contacting us or deleting your account. This will not affect the lawfulness of processing based on consent before its withdrawal.

8.5. GDPR Rights (EU Users): If you are located in the European Union, you have rights under the GDPR including the right to access your data, rectify inaccuracies, erase data, restrict processing, data portability, and the right to lodge a complaint with a supervisory authority.

8.6. KVKK Rights (Turkish Users): If you are located in Turkey, you have rights under the Turkish Personal Data Protection Law (KVKK) to access, correct, delete your data, and object to certain processing activities. You may exercise these rights by contacting us as described in Section 13.

9. YOUR RIGHTS

9.1. Right of Access: You have the right to learn whether your personal data is being processed and, if so, to obtain a copy of such data.

9.2. Right to Rectification: You may request the correction of inaccurate or incomplete information.

9.3. Right to Erasure: You may request the deletion of your personal data under certain conditions (for example, where it is no longer necessary for the purposes for which it was collected).

9.4. Right to Object: You may object to the processing of your data, including for direct marketing purposes.

9.5. Right to Data Portability: Where applicable, you may request your data in a structured, commonly used, and machine-readable format and have it transmitted to another controller.

9.6. Right to Restrict Processing: You may request the restriction of processing of your data in certain situations (for example, while we are verifying the accuracy of your data).

10. INTERNATIONAL DATA TRANSFER

10.1. Your data may be processed on servers located in different countries. In all cases, we apply appropriate technical and organizational measures to protect your data.

10.2. When data is transferred internationally, we ensure that such transfers are made in accordance with applicable data protection laws.

10.3. For EU users, international data transfers comply with GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses (SCCs) where necessary.

11. COOKIES AND TRACKING TECHNOLOGIES

11.1. Essential Cookies: Necessary for the basic functioning of our services (for example, login and session management).

11.2. Analytics Cookies: Help us understand how you use our services in order to improve them. Where possible, analytics data is anonymized or aggregated.

11.3. Advertising / Marketing Cookies (Website Only): On our website (not inside the mobile application), we may use cookies or similar technologies provided by third parties (such as Google or Meta) to measure the performance of our own marketing campaigns and, where applicable, to show interest-based content. You can manage your cookie preferences and advertising settings in your browser and device settings. Our mobile apps do not display third-party ads using advertising cookies.

11.4. Cookie Consent: By continuing to use our services, you consent to our use of cookies and similar technologies as described in this policy. Where required by law, we will obtain your consent through a cookie banner or similar mechanism.

12. POLICY CHANGES

12.1. This privacy policy may be updated from time to time to reflect changes in our practices, legal requirements, or services.

12.2. Significant changes will be communicated to you via email, in-app notification, or a prominent notice on our website.

12.3. Continued use of our services after policy changes constitutes acceptance of the updated policy.

12.4. Last update date: January 23, 2025

13. CONTACT

If you have any questions about this privacy policy or wish to exercise your data protection rights, you can contact us at:

Email: info@vistaephotography.com

All rights reserved. © Vistae Photography