1. Controller

The controller responsible for data processing on this website is:

Josua Sievers
like.photo
Richard-Wagner-Straße 40
91413 Neustadt a.d. Aisch

Email: hello@like.photo

2. Collection and Storage of Personal Data

When you visit our website, information is automatically sent to the server of our website. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automated deletion:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, your computer's operating system

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection.

3. Cookies

We use cookies on our website. Cookies are small files that your browser automatically creates and stores on your device. Cookies do not harm your device and do not contain viruses, trojans, or other malware.

Technically necessary cookies are used to ensure the functionality of the website (e.g., authentication, language settings). The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Hosting and Content Delivery

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes data in the USA. For data transfers to the USA, an adequacy decision by the EU Commission (EU-U.S. Data Privacy Framework) exists.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in secure and efficient provision of our website).

5. Authentication (Clerk)

For user login and account management, we use Clerk (Clerk, Inc., 660 4th Street #125, San Francisco, CA 94107, USA). The following data is processed during registration and login:

Email address
Name (if provided)
Profile picture (if provided)
Login data and session information

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance). An adequacy decision exists for data transfers to the USA.

Clerk Privacy Policy: https://clerk.com/legal/privacy

6. Database and Backend (Convex)

We use Convex (Convex, Inc., San Francisco, USA) as a backend service for storing and processing user data and generated images. The following data is processed:

Account data and settings
Product information and uploaded images
AI-generated images
Usage statistics (credits, generations)

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance). An adequacy decision exists for data transfers to the USA.

7. Payment Processing (Polar)

For processing payments and subscriptions, we use Polar (Polar Software Inc.). The following data is processed during payment transactions:

Name and email address
Payment information (processed directly by Polar or the payment service provider)
Billing information and purchase history

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance).

Polar Privacy Policy: https://polar.sh/legal/privacy

8. AI Image Generation

For generating product images, we use AI services. The product images you upload are transmitted to our AI partners for processing. The generated images are stored in your account.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance).

9. SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the address bar of the browser changing from 'http://' to 'https://' and by the lock symbol in your browser bar.

10. Data Retention

Personal data is only stored for as long as is necessary for the purposes for which it is processed:

Account data: Until deletion of the account by the user
Generated images: Until deletion by the user or account deletion
Payment data: 10 years (legal retention requirement)
Server log files: 7 days

11. Your Rights

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

12. Contact

If you have any questions about the collection, processing, or use of your personal data, for information, rectification, blocking, or deletion of data, please contact:

Email: hello@like.photo