Privacy Policy
Last updated: October 26, 2026
This Privacy Policy explains what personal data IMAGE LLC ("we", "us", "our") collects when you visit photoguru.ai or use the PhotoGuru library at app.photoguru.ai, why we collect it, and what rights you have. IMAGE LLC is the data controller.
1. Your Photos Stay With You
PhotoGuru gives you prompts to use in ChatGPT. You upload your photos, book covers and logos to ChatGPT (or another image tool), not to us. We never receive, see or store those files or the pictures you create. They are handled by that tool's provider under its own privacy policy (for ChatGPT, OpenAI's Privacy Policy).
2. Data We Collect
When you buy. Paddle, our Merchant of Record, processes your payment. Paddle sends us your name, email address, country, order number and the amount paid. We do not receive or store your card or bank details.
Your account. Your email address, name, an encrypted (hashed) password, account creation date, last login time and number of logins. If you reset your password, a one-time reset code with an expiry time.
How you use the library. The prompts you save as favorites and the prompts you copy, with the date. We use this to show your favorites and to learn which prompts are most useful.
Security data. The IP address, email address and time of login and password-reset attempts, to protect accounts against password guessing. To keep you signed in, a secure sign-in cookie and your browser's user-agent string.
Website analytics. On photoguru.ai we use Google Analytics to understand how visitors use the site: pages viewed, approximate location (country/city), device and browser type, referring website, and similar usage information. Google Analytics uses cookies for this (see Section 5).
Emails with us. If you email us, your email address and the content of your message.
3. Why We Use It (Legal Basis)
- To provide what you bought (contract): create your account, send your login details, let you sign in, handle refunds and support requests.
- To keep the Service secure (legitimate interest): limit login attempts, prevent fraud and account sharing.
- To improve PhotoGuru (legitimate interest, or consent where required): website analytics and prompt usage statistics.
- To send service emails (contract): login details, password resets and important notices about the Service. If we send product news, every email has an unsubscribe link.
- To meet legal obligations: for example accounting and tax records.
We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you.
4. Who We Share It With
We share personal data only with service providers that help us run PhotoGuru, and only as much as they need:
- Paddle.com (United Kingdom): payments, invoices, sales tax and refunds, as Merchant of Record. Paddle Privacy Policy.
- Mailgun (Sinch, United States): sending account emails such as login details and password resets.
- Google Analytics (Google, United States / Ireland): website analytics. Google Privacy Policy.
- Cloudflare (United States): website delivery and protection against attacks.
- Our hosting provider: our servers and database are located in the European Union.
Some of these providers process data outside the European Economic Area. Where they do, the transfer is protected by the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
We may also disclose data when the law requires it, or to protect our rights in a legal dispute.
5. Cookies
- Necessary cookies in the PhotoGuru library: a session cookie and a secure sign-in cookie (
pg_keep, up to 1 year) that keep you signed in until you log out. The library does not work without them. - Analytics cookies on photoguru.ai: Google Analytics (cookies named
_gaand_ga_*, stored for up to 2 years).
You can block or delete cookies in your browser settings, or opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. We do not use advertising cookies.
6. How Long We Keep It
- Account and usage data: while your account is active. If your access ends (for example after a refund), we delete or anonymize it within 12 months, unless you ask us to delete it sooner.
- Login attempt records: up to 7 days.
- Purchase and invoice records: as long as tax and accounting law requires (in Latvia, up to 10 years).
- Google Analytics data: up to 14 months.
- Support emails: up to 3 years after the conversation ends.
7. Your Rights
Under the GDPR and similar laws (including US state laws such as the CCPA), you have the right to:
- Get a copy of the personal data we hold about you;
- Correct inaccurate data;
- Have your data deleted;
- Restrict or object to our use of your data, including analytics;
- Receive your data in a portable format;
- Withdraw consent at any time, where we rely on consent.
To use any of these rights, email [email protected]. We reply within 30 days. You can also complain to a data protection authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv), or the authority in your own country.
8. Security
The site uses encrypted HTTPS connections. Passwords are stored only as secure hashes. Access to our servers and database is limited and protected. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.
9. Children
PhotoGuru is for adults. We do not knowingly collect data from anyone under 18.
10. Changes to This Policy
We may update this Privacy Policy. We will post the new version on this page with a new "Last updated" date and, for material changes, email account holders.
11. Contact
IMAGE LLC, Rupniecibas iela 4, Riga, LV-1010, Latvia · [email protected]