Privacy policy

Last updated: November 5, 2026

Summary

• We collect what we need to run AI Christmas Photos: your Google sign-in details, what you submit and generate, your purchases, and basic usage and device data.
• We do not sell your personal information.
• We share data with the service providers that help us run the Service, such as AI model providers, our payment processors and hosting. Otherwise we share it only where the law requires it, in a business transfer, or with your consent.
• You can ask us to access, correct or delete your data by emailing support@aichristmasphotos.net.

This Privacy Policy explains how AI Christmas Photos ("we", "us", "our") collects, uses, stores and shares personal information when you use the Service at https://aichristmasphotos.net (the "Service"), and the choices you have. By using the Service, you agree to this Policy.

1. Who Is Responsible for Your Data

• Data controller: AI Christmas Photos (aichristmasphotos.net)
• Privacy email: support@aichristmasphotos.net
• Data Protection Officer (DPO): not applicable

2. Information We Collect

2.1 Information You Give Us

• Account information: when you sign in with Google, we receive your name, email address, profile picture and Google account ID. Google also issues a sign-in token, which is stored with your account. We never receive or store your Google password. If you leave your email in a site form, we use it only for that request, such as telling you when ordering opens.
• Content you submit: uploaded photos, text prompts, greetings and generation settings.
• Generated content: photos, cards and videos created by the Service.
• Purchase information: the credit pack, amount, currency, payment status and transaction IDs. We never receive or store your full card number; our payment processors handle card details.
• Messages: emails, support and refund requests, content reports and feedback you send us.

2.2 Information Collected Automatically

• Device and network: IP address, browser type, operating system, device type, language and time zone.
• Usage: pages visited, features used, generation history, credit balance and usage.
• Logs: request times, error logs and performance data, and content-moderation results.

3. How We Use Your Information

We do not use your prompts, uploads or generated content to train AI models. We may produce aggregated or anonymized statistics that cannot be linked to you.

4. Cookies and Analytics

We do not use advertising cookies. We use these third-party analytics tools: Plausible.

You can block or delete cookies in your browser settings; blocking strictly necessary cookies will stop you from signing in.

5. How We Share Information

We do not sell your personal information, including as defined under laws such as the CCPA. We share information only in these cases:

• Service providers that help us run the Service, bound by confidentiality and only for that purpose:

  • Payment processing: Waffo Pancake acts as the merchant of record, and Stripe processes payments. The processor receives your name, email, purchase details and payment information entered at checkout. Card details are not stored on our servers.
  • AI model providers: prompts, uploaded photos and settings are shared only to generate your content. AI providers may keep generated files for a limited time; our video provider keeps them for up to 14 days.
  • Content safety: automated services screen submitted and generated content for safety.
  • Infrastructure: Cloudflare provides hosting, database, file storage and delivery, and email delivery.
  • Google: Google provides Google sign-in, so your browser connects to Google when our pages load. Google reCAPTCHA may be used to prevent abuse.

• Legal requirements: where required by law, court order or a lawful request from authorities, including reporting child sexual abuse material.

• Business transfers: if the Service is merged or sold, with advance notice to you and continued protection of your information.

• With your consent: for any other purpose, with your explicit prior consent.

6. Security

• All traffic to and from the Service is encrypted with TLS (HTTPS).
• Card details are handled by PCI-DSS compliant payment processors and never reach our servers.
• Our team's access to personal data is limited to what is needed to run the Service.
• Uploaded photos and results are delivered through long, hard-to-guess links. Treat a link like a password: anyone you share it with may be able to open the file.
• Sign-in is handled through Google's OAuth 2.0.

No system is completely secure. If a security incident affects your rights, we will notify you and the relevant authorities within 72 hours of discovery where the law requires it. Please keep your Google account secure.

7. How Long We Keep Data

To delete your account, email support@aichristmasphotos.net from your registered email address. We remove your access promptly. Records required by law may be kept longer. Records needed to enforce our policies against an account closed for a serious violation (such as a child safety violation) may be kept longer where the law allows or requires it.

8. Your Rights

To use any of these rights, email support@aichristmasphotos.net from your registered email address. We respond within 30 days.

California residents (CCPA): you can ask to know and delete your personal information, and we will not treat you differently for doing so. We do not sell personal information.

EEA, UK and Swiss residents (GDPR): the legal bases we rely on are listed in Section 3.

Wherever you live, you can also complain to your local data protection authority.

9. Marketing

We do not send marketing emails. If we start, we will only do so with your consent, and every message will include an unsubscribe link. Service messages such as generation results, receipts and security alerts are not marketing and will still be sent. If you leave your email in a site form, we use it only for that request, such as telling you when ordering opens.

10. International Transfers

Our service providers, such as Cloudflare, operate worldwide. Your information may therefore be processed outside your country. Where required, we protect these transfers with data processing agreements, including the EU Standard Contractual Clauses where applicable, and transfer data only to recipients that provide an appropriate level of protection.

11. Children

The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. Photos depicting children may only be uploaded by a parent or legal guardian and are deleted under the retention periods above. If you think a minor has given us information, email support@aichristmasphotos.net and we will delete it promptly.

12. Third-Party Links and Services

The Service links to and works with third-party services, such as Google sign-in and our payment processors' checkout. This Policy covers only the data we collect. Please read those services' own privacy policies.

13. Changes to This Policy

For material changes, we will give at least 15 days' notice by email or by a notice on the Service, and update the date at the top of this page. Continued use after a change takes effect means you accept the updated Policy.

14. Contact

• Privacy and support email: support@aichristmasphotos.net
• Response time: within 2 business days for support requests; within 30 days for data rights requests

AI Christmas Photos · https://aichristmasphotos.net