Privacy Policy

Who we are and how to contact us

Christmas Photo AI is operated by an individual developer. For any privacy question or request, email support@christmasphotoai.com.

Information we collect

Account information: your name, email address, and profile image when you sign in with Google; or your name, email address, and a hashed password when you register with email.

Photos and results: the photo you upload, the style and format you choose, the generated result, and the dates and credit cost of each generation.

Credits, orders, and payments: your credit balance, credit ledger, pack purchases, order status, and the email address used for receipts. We do not receive or store your full card number.

Technical data: request IDs, IP address and user agent used for rate limiting and security, error logs, and the pages or API endpoints you call.

Cookies: a sign-in session cookie and a language-preference cookie. We do not use advertising cookies.

How we use your information

We use your information to create and secure your account, generate and store your portraits, keep credits and orders accurate, run safety checks on uploads and results, provide support, prevent abuse, and comply with legal and tax obligations.

We do not sell your personal data and we do not use it for advertising.

AI processing and third-party services

Image generation: your uploaded photo, the selected style instructions, and the requested format are sent to our image-generation API provider (Lingke, which serves the gpt-image-2.5 model) so that it can produce your portrait. The result is returned to us and stored privately.

Content safety: uploaded photos and generated results are sent to our moderation provider (SeeAPI NSFW Filter 2.0) for automated image-safety checks before they are used or shown.

Payments: Waffo Pancake acts as merchant of record and receives the email address, order, and payment details needed to process your purchase, taxes, receipts, and refunds.

Email: our email provider (Resend) receives the address and content needed to deliver receipts, security notices, and support replies.

Hosting and storage: Cloudflare hosts the site, database, queues, and private media storage. Google provides Google sign-in when you choose it.

Each provider receives only the data needed for its function. Some providers process data outside your country; where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Storage, retention, and deletion

Uploaded photos and results are stored in private object storage and served only through authenticated endpoints tied to your account. They are not public URLs.

A creation is kept until you delete it from My creations or ask us to delete your account. Deleting a creation removes the stored file.

Order, invoice, tax, and credit records may be kept for up to 7 years where tax or accounting law requires it. Error logs are kept for as long as needed for security and debugging. Moderation records are kept for as long as needed to enforce our content policy and meet legal obligations.

Your rights

You can ask for a copy of your personal data, correct it, export it, delete it, or object to certain processing. You can also withdraw consent where processing is based on consent.

Email support@christmasphotoai.com from the address on your account. We respond within 30 days. We may need to verify your identity before acting. Deleting your account removes your photos and results; records we must keep for tax, accounting, or legal reasons are retained only for those purposes.

If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

Children

The service is not directed to children under 13, and you must be at least 13 to create an account. If you upload a photo of a minor, you must be the minor's parent or guardian, or have the consent of their parent or guardian.

If we learn that a child under 13 created an account, we will delete it.

Security

We use encrypted connections, private storage, access controls, rate limiting, and short-lived authenticated media links. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities as required by law.

Changes to this policy

We may update this policy. We will change the effective date at the top of this page and, for material changes, notify you by email or on the site.

Contact

Privacy questions and requests: support@christmasphotoai.com.