Privacy Policy

Effective date: September 25, 2026. Last updated September 25, 2026.

1.Who we are

photoaicompany ("we", "us") is a Canva-style design studio operated by Aiden Martin, available at photoai.company and through the photoaicompany AI connector. Contact: support@photoai.company.

2.The free tools & AI connector: what we process

The 30 design tools — canvas editing, text and typography, stock media search, shapes, layers, brand kits, photo filters, templates, and export — work through the website and the AI connector. Your inputs are processed to produce the result you asked for and are not retained beyond that.

Data	When	Purpose	Stored?
Design prompts & text you type	Design generation, text tools	Produce the requested design or edit	No — processed per request
Images you upload	Upload / add-image tools	Place on your canvas	Yes — saved to your asset library (see section 5)
Stock search queries	Stock media search	Return matching stock results	No — sent to Pexels per search (see section 7)
Support messages	You email support@photoai.company	Respond to your request	Yes — standard email retention

What the free tools and AI connector process: the data, when it is handled, and whether it is stored.

3.What we never collect

We do not sell personal data. Not to advertisers, not to data brokers, not to anyone.
No third-party advertising trackers or cross-site tracking.
We do not collect precise geolocation.

Three things photoaicompany never collects: sold data, advertising trackers, precise geolocation.

4.Account data

If you create a photoaicompany account, we store your email address and authentication credentials. Identity and sign-in are provided by Firebase (Google's authentication platform); sign-in data is processed under Google's privacy policy as well as this one. Account data is never sold and is used only to operate your account and the service.

5.Your designs & content

Your designs, uploaded assets, and brand kits are stored so you can open, edit, and export them across sessions. Today this storage lives in your browser's local storage; when you are signed in, content syncs to our infrastructure so it follows your account. You own your designs and uploads (see our Terms of Service). If you delete a design or asset, it is removed from our systems within a reasonable period, subject to backups that age out automatically.

The lifecycle of your designs and content: create, store, sync, use, delete.

6.Billing data

Payments are processed by Polar, our Merchant of Record. Polar collects and processes your payment information under its own privacy policy; we receive transaction confirmations but we never see or store full card numbers. We keep transaction records (what you bought, when, for how much) for accounting, tax, and refund purposes.

7.Stock media (Pexels)

Stock media search is powered by Pexels. When you search, your query is sent to Pexels to return results, and stock content you use is subject to the Pexels license terms. We do not control Pexels' service; their privacy policy applies to data they process.

8.AI features

Features such as background removal and AI design generation use third-party AI providers and require provider API keys. When you use them, your image or prompt is sent to the AI provider to produce the result. Functions that need a key you have not supplied fail honestly instead of pretending — we do not generate fake output. We do not use your content to train models.

9.Cookies & local storage

photoai.company uses a small set of cookies to keep you signed in and remember your preferences, and your browser's local storage to keep your projects, assets, and brand kits available offline. We do not run third-party advertising cookies. You can block cookies in your browser; the site will still work, though sign-in sessions will not persist and locally stored projects stay on that device only.

Cookies and local storage: what photoaicompany uses, what it never uses, and what blocking them does.

10.Third parties

Cloudflare provides our hosting, content-delivery, and security infrastructure, and processes technical data (such as IP addresses in server logs) to deliver the service.
Firebase (Google) provides account identity and authentication.
Polar acts as Merchant of Record for payments, under its own privacy policy.
Pexels powers stock media search, under its own policies and license terms.
AI providers process images and prompts for the AI features you invoke.
The AI connector runs on the AI platform you invoke it from (such as OpenAI or Anthropic); your tool inputs are processed through that platform under its own privacy policy.
We disclose data to authorities only where legally required.

The third parties that process data to deliver photoaicompany, and what each one does.

11.Retention

We keep data only as long as needed for the purpose it was collected: account data for the life of your account; designs and assets until you delete them; transaction records for as long as tax and accounting law requires; support emails under standard retention. When data is no longer needed, we delete or anonymize it.

How long each category of data is kept: accounts, designs, transactions, support emails.

12.Your rights

You may request access, correction, or deletion of your personal data at any time by emailing support@photoai.company. You may also request a copy of your data, object to or restrict certain processing, and withdraw consent where processing is based on it. Anonymous tool inputs are not retained, so there is nothing to delete for signed-out use. We respond to rights requests promptly and without charge.

Your privacy rights: access, correction, deletion, data copy, objection, and withdrawing consent.

13.Security

We protect your data with encryption in transit and at rest, strict access controls, and least-privilege internal access. No system is perfectly secure; if we discover a breach affecting your personal data, we will notify you and the relevant authorities as the law requires.

Four layers of security protecting your data, plus our breach-notification commitment.

14.Children

photoaicompany is not directed at children under 13, and we do not knowingly collect their data. Account holders must be at least 18 years old, or the age of majority in their jurisdiction (see our Terms of Service).

15.International transfers

Our infrastructure and subprocessors operate internationally. Where personal data moves across borders, we use appropriate safeguards and process only what the service requires.

16.Changes to this policy

We will post policy updates at photoai.company/privacy with a new "Last updated" date. Material changes will be announced to account holders by email before they take effect.