Privacy policy

This policy explains what personal information Sitwell collects, why, how long we keep it, and the choices you have. We wrote it to be readable. If anything is unclear, email [email protected].

Who we are

Sitwell is operated by [Company legal name], [Street, postcode, city, country]. Contact: [email protected].

What we collect and why

Your account

Your email address, used to sign you in with one-time links and codes and to contact you about your orders.

Your photos

The photos you upload and the images we generate from them. We use them only to create your images. We do not use them to train AI models, we do not sell them, and we do not use them to identify you. When a photo reaches us we remove embedded metadata such as GPS location and camera details.

Payments

Payments are processed by Stripe. We receive the package you bought, the amount and the payment status, never your full card details. We keep purchase records to meet accounting and tax obligations.

Reviews

If you write a review, we publish your rating, your text and the name you choose, marked as a verified buyer, with the use case and month. We never publish your email or photos with it. You can ask us to remove your review at any time, and it is deleted with your account.

Invite links and the affiliate program

If you arrive through someone's invite or affiliate link, we store that link's code in a first-party cookie for 30 days so we can add your bonus photos and credit the person who invited you. We record that you were referred, but the person who shared the link never sees your name, email or photos, only a count and, for affiliates, the commission amount. If you apply to become an affiliate, we process your PayPal email, the website or profile you tell us about and your description of your audience, to review your application and pay commissions, and we keep payout records as tax law requires.

Product analytics (only if you allow it)

If you turn on “Product analytics”, we use PostHog to measure which pages and steps work, for example whether people who choose a LinkedIn photo reach checkout. We record steps such as choosing a use case, finishing an upload, starting checkout and completing a purchase, with the package, price and a random purchase id. We don't record sessions or capture what you type, and we never send your email, photos, image links or anything about the content of your images. If you don't turn it on, no analytics script is loaded.

Ad measurement (only if you allow it)

If you turn on “Ad measurement”, we load Google's ad tag so Google Ads can tell us whether a visit from one of our ads led to a purchase. Google receives that a purchase happened, its value, currency and a random purchase id, plus the cookie Google uses to recognise an ad click. We don't use it for remarketing, and we never load it on pages where you upload or view photos. Under some US state laws this counts as “sharing” personal information for advertising; see below for how to opt out.

You can change both choices at any time via “Your privacy choices” in the footer.

Security and operations

Technical logs (such as IP address and request time) are kept briefly to operate the service securely and to prevent abuse, for example rate limiting.

Biometric information

Some US states, including Illinois, Texas and Washington, regulate “biometric identifiers” such as a scan of face geometry. Sitwell does not create face templates and does not use your photos to recognise or identify you. To create your images, the AI model analyses the photos you upload, including your facial features. Because that processing could be treated as biometric information under some laws, we apply these rules:

• Purpose: only to generate the images you request.
• Consent: we ask for your written consent before each upload.
• No sale or profit: we never sell, lease, trade or otherwise profit from your photos or any information derived from them.
• Disclosure: only to the service providers listed below, only to create your images.
• Retention and destruction: uploaded photos are permanently deleted 7 days after upload and generated images 30 days after creation, or earlier if you delete them or your account. In no case do we keep them longer than needed to provide your images.

[Counsel to confirm this notice meets BIPA, CUBI and RCW 19.375 requirements before launch.]

Who we share information with

We use these service providers, under contracts that limit their use of your information to serving us:

• Supabase: authentication, database and private file storage. [Region: e.g. US East]
• Replicate: runs the AI model that creates your images. Your reference photo is sent via a link that expires within an hour. [Confirm Replicate's retention of inputs and outputs.]
• Stripe: payment processing.
• Resend: sends our emails, such as your purchase confirmation (your email address and the purchase details).
• Vercel: website hosting.
• PostHog: product analytics, only if you allow it.
• Google: ad measurement, only if you allow it (see above).

We may also disclose information when the law requires it, or to protect the rights and safety of our users.

Selling and sharing personal information

We do not sell personal information for money. If you turn on ad measurement, the limited information described above is shared with Google, which some US state laws (such as California's) treat as “sharing” for cross-context behavioral advertising. It is off unless you turn it on, and you can opt out at any time with the “Do Not Sell or Share My Personal Information” link in the footer. We treat a Global Privacy Control signal from your browser as an opt-out and never turn ad measurement on while it is present. Your photos and anything derived from them are never sold or shared.

How long we keep information

• Uploaded photos: deleted automatically 7 days after upload, or earlier when you delete them.
• Generated photos: deleted automatically 30 days after creation, or earlier when you delete them.
• Account information: until you delete your account.
• Purchase records: as long as tax and accounting law requires, without your photos.
• Affiliate payout records: as long as tax law requires, even if the affiliate account is closed.

Your choices and rights

You can delete individual photos, all your photos, or your whole account yourself in your account settings. Depending on the state you live in (for example California, Colorado, Connecticut, Virginia or Texas), you may also have the right to know what personal information we hold, get a copy of it, correct it, delete it, and opt out of its sale, sharing or use for targeted advertising (which we don't do). Email us from the address you sign in with to make a request. You may use an authorized agent. If we decline your request, you can appeal by replying to our decision. We will not treat you differently for exercising your rights.

Security

Photos are stored in private storage that only our servers can access, and are only ever shown through links that expire within minutes. No system is perfectly secure, but we limit who and what can access your photos.

Children

Sitwell is only for adults. Do not upload photos of anyone under 18.

Changes

If we make material changes to this policy, we will tell you by email or in the app before they take effect.