AIDogPhotos
Privacy Policy
Last updated: 7 May 2025
This Privacy Policy explains how we process personal data in accordance with the EU General Data Protection Regulation (GDPR).
Controller: Marius Vogel, Faulensiek 42A, 32457 Porta Westfalica, Germany – support@aidogphotos.com.
1. Summary of what we collect
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Account & contact | Email address | Create account, deliver Outputs, support | Art. 6(1)(b) GDPR |
| Payment | Name, address, payment method, VAT ID (processed by Lemon Squeezy) | Billing, invoicing, tax compliance | Art. 6(1)(b) & (c) |
| Uploads | Dog photo (memory only) | Generate Output | Art. 6(1)(b) |
| Outputs | AI-generated image (90 days) | Re-download, quality checks | Art. 6(1)(b) |
| Logs | IP, browser info, timestamps | Security, error diagnostics | Art. 6(1)(f) |
No non-essential cookies – no advertising tracking.
2. Where we process data
Primary data is stored in Google Cloud europe-west4 (Netherlands).
Payments are handled by Lemon Squeezy, Inc. (USA – EU-US Data Privacy Framework & SCCs).
3. Third-party processors
- Google Cloud / Firebase (NL) – hosting, storage, email; DPA + encryption
- Lemon Squeezy, Inc. (US) – payment & invoicing; DPF + SCCs
4. Retention periods
- Outputs: 90 days from creation
- Support emails: 2 years after last interaction
- Billing records: 10 years (German tax law)
- Server logs: 30 days
5. Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing (Art. 15-21 GDPR). Email support@aidogphotos.com; we aim to respond within 30 days.
You may also complain to the supervisory authority for NRW:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), poststelle@ldi.nrw.de.
6. Security measures
TLS (in transit), encryption at rest, MFA, and role-based access to production systems.
7. International transfers
For transfers outside the EEA we rely on adequacy decisions (EU-US DPF) or Standard Contractual Clauses.
8. Automated decision-making
No automated decision-making or profiling within Art. 22 GDPR.
9. Updates to this policy
We may amend this policy to reflect practice changes. Purchasers will be emailed if changes are significant.