DRAFT — pending legal review. This document describes what we actually do, but it has not been reviewed by a lawyer and is not yet a binding policy. Do not rely on it.
Privacy
Last updated: 2026-08-28
This explains what we collect, why, and who else sees it. It is written to be read rather than to be survived.
Who we are
PicFinish is a product of Expandato, established in Serbia. We serve customers in the European Union, so the GDPR applies to how we handle personal data.
What we store
The photographs you upload and the images we generate from them, your email address, your plan and how many pictures you have used. We keep your uploads and results so that your library works and so you can come back to them later.
Who processes your photographs
Generating an image means sending your photograph to a third-party AI provider. Your pictures leave our systems for that purpose and no other. We do not sell them, publish them, or use them to train anything.
The services we rely on
Supabase hosts our database, our file storage and our sign-in. A payment processor will handle payments when payments are live. Each is a processor acting on our instructions.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Deleting your account removes your photographs and results.
Cookies
This marketing site sets no cookies and runs no advertising or analytics scripts. The app itself uses a sign-in cookie, which is necessary for it to work at all.