Privacy policy

What we collect

Account: your name, email address and password (the password is handled by our authentication provider and never visible to us).

Usage: your credit history and the images you generate, kept in Your images.

Purchases: the pack, amount, date and email of each payment, and when you gave up your right of withdrawal. Your card details go straight to Stripe: we never see them.

Product photos you upload: sent to the image models to create your images, and kept with your images (for redos, manual integrations and to reuse them later) until you delete those images or your account.

Requests you send us: refund requests, manual integrations, post-production, scene reservations and campaign briefs, with the details you write in them, and the messages we send you about them.

Technical data: your IP address, used briefly to prevent abuse (rate limits).

Advertising, only if you accept Meta’s cookies: the pages you visit on the site, and whether you sign up, start a payment or buy credits (with the amount).

Analytics, only if you accept analytics cookies: how you use the site’s pages (visits, clicks, scrolling), through Contentsquare.

Why

To provide the service you ask for (your account, generating and storing your images): this is necessary for our contract with you.

To prevent abuse and keep costs under control: our legitimate interest.

To answer your requests and briefs: your request.

To measure our ads on Facebook and Instagram and show them to people likely to be interested: your consent, which you can withdraw at any time.

To understand how the site is used and improve it: your consent, which you can withdraw at any time.

We don’t sell your data and don’t use your images to train AI models.

Who processes it

Supabase (accounts, credits, image library and your requests; servers in the European Union, Paris).

Vercel (website hosting, United States).

Sanity (the site’s content only: collections, scenes and texts).

Resend (account emails, such as sign-up confirmations).

Stripe (payments, United States and European Union).

fal.ai (image models), which receives your product photos and the scene to create your images.

Meta Platforms Ireland (Facebook and Instagram ads), only if you accept its cookies. When you buy credits, we also send Meta the purchase with your email address in a scrambled (hashed) form, so it can link it to your Meta account. Meta is jointly responsible for this with us; its own policy applies to what it does with it (facebook.com/privacy/policy).

Contentsquare (analytics, European Union), only if you accept analytics cookies.

Some of these providers are outside the European Union. Transfers rely on the European Commission’s standard contractual clauses or equivalent safeguards.

How long

Account data and your images: as long as your account exists. You can delete your account at any time from your Account page: your account, credits and images are deleted immediately (backups are cleared within 30 days).

Reports, help requests and briefs: up to 3 years after our last exchange.

Payment records: 10 years, as French accounting law requires, even if you delete your account.

Abuse-prevention data (IP addresses): a few days at most.

Cookies

Some cookies are needed for the site to work: keeping you signed in, remembering your language and remembering your cookie choice (6 months).

With your consent only, Meta’s cookies (_fbp, _fbc, kept up to 90 days) measure our ads and help show them to the right people. With your consent only, Contentsquare’s cookies (_cs_id, _cs_s, _cs_c, kept up to 13 months) show us how the site is used. We ask on your first visit; Refuse works just like Accept, Customise lets you choose each kind, and you can change your mind at any time with the Cookies link at the bottom of every page.

Your rights

You can access, correct, delete or export your data, object to its use, or ask us to limit it. Write to still.life.ai@gmail.com; we reply within one month.

If you think your rights aren’t respected, you can complain to the CNIL (cnil.fr).