Privacy Policy
Last updated: [DATE]. Draft — to be reviewed before launch.
Who is responsible
[COMPANY NAME], [ADDRESS], United States, is responsible for your personal data in Pic2Post. Contact: [EMAIL]. [EU REPRESENTATIVE, if required].
What we collect and why
| Data | Why |
|---|---|
| Name, email, password (stored only as a secure hash) | To run your account |
| Photos you upload | To write your content; kept with your posts until you delete them |
| Voice recordings | Sent once to create a transcript, then discarded. We keep only the written transcript |
| Property names and addresses | To measure distances to nearby places |
| Generated posts and your brand settings | So you can edit and reuse them |
| WordPress site, username and application password (encrypted) | To send drafts to your site when you ask |
| Usage records (time, post type, errors) | To count credits, fix problems and prevent abuse |
| Subscription status from our payment reseller | To give you the plan you paid for. We never see your card details |
We process this data to provide the service you signed up for (contract), and to keep it secure and working (legitimate interest). We do not sell your data and do not use it for advertising.
Who else processes it
- Google (Gemini API and Google Maps Platform): your photo, voice note, notes and property location are sent to generate content and measure distances. We use Google's paid API service, under which Google does not use this data to train its models.
- Hostinger: hosts our server and database.
- Lemon Squeezy: handles payments, taxes and invoices as merchant of record.
- [EMAIL PROVIDER]: sends account emails such as password resets.
- Your WordPress site: only when you choose to send a draft there.
Some of these providers process data in the United States. Where data leaves the EU, it is protected by the providers' standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
We keep your data while your account exists. When you delete your account, your posts, photos, properties and settings are deleted straight away. Server backups are overwritten within [30] days. Records we must keep for tax purposes are held by our payment reseller.
Your rights
You can download all your data and delete your account at any time in Settings. You can also ask us to correct or restrict your data, or object to how we use it, by writing to [EMAIL]. If you are in the EU, you may complain to your data protection authority (in Spain: the AEPD, aepd.es).
Cookies
Pic2Post uses one essential cookie to keep you logged in. There are no tracking or advertising cookies.
Photos of people
If your photos or recordings include other people, you are responsible for having their permission. Please avoid uploading personal data you do not need.