Privacy Policy

1. Who we are

ShelfPics is operated by {{LEGAL ENTITY}}, a {{LEGAL FORM}} with its registered office at {{REGISTERED OFFICE}} (Company number: {{COMPANY NUMBER}}), {{COUNTRY}}. In this policy, “we”, “us” and “our” mean {{LEGAL ENTITY}}.

For the personal data described here, {{LEGAL ENTITY}} is the data controller. This policy covers our website at https://shelfpics.com, the studio at /app, your account pages and our contact form (together, the “Service”). You can reach us about privacy at support@shelfpics.com. We answer email during our support hours (Mon to Fri, 09:00 to 17:00 UTC). We do not offer phone support.

2. The short version

• Your product photos are cut out, edited, resized and exported inside your browser. Our servers never receive them, and we store no photos and no finished files.
• For an AI lifestyle scene, we send only a fixed text description of the chosen scene to our AI provider. Your photo is never sent.
• We store what we need to run your account: your name, email, a hashed password, your plan and credit balance, purchase records and a small record for each charged shot (no image, no filename).
• Payments are handled by Stripe. We never see or store your card number.
• We use one strictly necessary session cookie. No analytics, advertising or tracking cookies.
• We do not sell or share your personal data for advertising, and we never use your content to train AI models.

3. Your photos stay on your device

When you open a photo in the studio, the product is cut out by an open-source segmentation model (ISNet general-use, MIT licence) that runs in your browser using Transformers.js and ONNX Runtime Web. Backdrops, shadows, reflections, light adjustments, resizing and export to PNG, JPG or WebP (as single files or one ZIP) also happen in your browser. Finished files are saved straight to your own device.

This means the photo file, its contents, its filename and any metadata inside it (such as camera details or location data your phone may have embedded) are not transmitted to ShelfPics. We cannot see, recover or delete your photos, because we never had them. If you clear your browser or close the tab, unsaved work is gone.

The first time you open the studio, your browser downloads the model weights (about 42 MB) from Hugging Face (huggingface.co) and the runtime files from the jsDelivr CDN, then keeps them in its cache. Those hosts see your IP address and normal request details (such as browser type and time of request), as with any file download. They do not receive your photos.

4. Data we collect

Account data

• Name and email address you give when you sign up.
• Password, stored only as a salted PBKDF2-SHA256 hash. We cannot read your password.
• Account creation date.
• Sessions: when you sign in we create a random session token. Your browser keeps it in a cookie; we store only a SHA-256 hash of it, with its expiry date.

Plan and usage data

• Plan and credits: your current plan, credits granted, credits used and the date your access ends.
• Shot records: each time credits are spent we record your user ID, a random shot ID, the kind of shot (clean background, 1 credit, or AI scene, 2 credits), the credits charged and the time. This record contains no image, no filename and nothing about what is in your photo. It exists so that one photo is charged only once however many sizes you export, so failed scenes can be refunded, and so we can answer billing questions.
• Scene choice: when you generate a scene, your browser tells us which of the 8 preset scenes you picked. We use it to build the fixed prompt and do not store it apart from the shot kind above.

Purchase data

When you buy a plan, you pay on a Stripe-hosted page. After payment, our server asks Stripe to confirm the Checkout Session using a read-only key. We then store the Stripe Checkout Session ID, the related payment ID, the plan, the amount, the purchase date, the link to your account and, if it happens, the refund date. To match the payment to your account we compare the account reference or the email address on the Stripe session with your account; we do not keep a separate copy of your billing details. Stripe holds your card details, billing name, billing address and email under its own privacy policy.

Contact form and support messages

If you use our contact form we store your name, email address, the subject you choose and your message in our database so that our team can read and answer it. If you email us, we keep the email thread in our mailbox. Please do not send us sensitive information you do not need to share.

Security and technical data

• Rate-limit counters: to slow down password guessing and spam, we count sign-in, sign-up, contact and studio requests. The counter key is a SHA-256 hash of your IP address combined with the email or account involved, so we do not store your IP address in readable form. These counters are deleted after one day.
• Request logs: our hosting provider, Cloudflare, processes your IP address and request metadata (such as URL, time, browser type and response status) to deliver the site and protect it from attacks. Our server code logs short technical event names, such as an error type, for debugging. These logs are kept for a limited period under Cloudflare’s log retention settings.

5. Data we do not collect

• Your product photos, cut-outs, finished images or ZIP files.
• Photo metadata such as location or camera information.
• Full card numbers or bank details (Stripe handles these).
• Analytics, advertising identifiers, cross-site tracking data or social media pixels. We do not use any of these.
• Special category data (such as health or religious beliefs). The Service does not ask for it; please do not include it in messages.

6. How we use data and our legal bases

If you are in the UK or the European Economic Area, the UK GDPR or the EU GDPR requires us to have a legal basis for each use of your personal data. The table below sets them out. We use consent only where stated, and today the Service does not rely on consent for any processing.

Where we rely on legitimate interests, we have balanced our interests against your rights and believe the processing is expected and proportionate. You can object to it (see section 13). We do not send marketing emails. If we ever want to, we will ask for your consent first where the law requires it, and you will be able to withdraw it at any time.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

7. AI scenes and no AI training

For a lifestyle scene you choose one of 8 preset scenes. Our server sends only the fixed text prompt for that scene to Cloudflare Workers AI (the FLUX.1 schnell model), which returns an empty backdrop image: a surface and a background with no product in it. The backdrop is sent back to your browser and is not stored by us. Your product is then placed on top in your browser, so the AI never sees or changes your product.

We never use your content to train AI models. Your photos never reach us, and the scene requests we make contain no personal data. There is no setting to change because there is nothing to opt out of.

8. How we share data

We do not sell your personal data and we do not share it for targeted advertising. We share it only in these cases:

• Service providers who process data for us under contract, listed in section 9.
• Authorities, courts and advisers where the law requires it, to respond to valid legal process, or to protect the rights, safety and property of our users, the public or us. We will tell you about such a request where we are allowed to.
• Professional advisers such as accountants, auditors and lawyers, under confidentiality duties.
• A successor business if we are involved in a merger, acquisition or sale of assets. The successor must protect your data as this policy describes, and we will tell you before your data becomes subject to a different policy.
• Anyone else at your request or with your permission.

Inside {{LEGAL ENTITY}}, only authorised staff who need it to provide support, handle payments or keep the Service secure can see account, purchase and contact data.

9. Sub-processors

These are all the third-party providers involved in running the Service. We do not use any analytics, advertising or email marketing providers.

Stripe acts as an independent controller for some payment data (for example for fraud prevention and its legal duties), under the Stripe Privacy Policy. We will update this list before adding a new provider that processes personal data.

10. International transfers

Our providers operate in the United States and on global networks, so your personal data may be processed outside the UK or the European Economic Area. When that happens we rely on recognised safeguards: Standard Contractual Clauses approved by the European Commission (with the UK addendum where needed), and, where a provider participates, the EU-US Data Privacy Framework and its UK extension. You can ask us for more information about these safeguards at support@shelfpics.com.

11. How long we keep data

An automatic daily job deletes expired sessions, shot records older than 400 days, contact messages older than 12 months and old rate-limit counters. When you delete your account from your account page, we immediately delete your user record, sessions, plan and credits and shot records. Purchase records are kept with the link to your account removed, because we need them for accounting, tax and refund obligations. Deleted data may remain in our hosting provider’s encrypted backups for a short time before it is overwritten.

12. Security

We protect data with encryption in transit (HTTPS) and at rest, salted password hashing, hashed session tokens, rate limits and origin checks on account actions. No system is perfectly secure, but we work to protect your data and will tell you and the relevant authority about a breach where the law requires it. Read the details on our Security page.

13. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a copy.
• Correct data that is wrong or incomplete.
• Delete your data. You can delete your account yourself on the account page, or ask us.
• Restrict how we use your data in some cases.
• Object to processing based on legitimate interests.
• Data portability: receive data you gave us in a common machine-readable format.
• Withdraw consent where we rely on it, without affecting earlier processing.

To use any of these rights, email support@shelfpics.com from the email address on your account (or tell us which address it is) so we can confirm the request is yours. We may ask for more information to verify your identity. We answer within one month, which can be extended where the law allows for complex requests; we will tell you if that happens. We do not charge for requests unless they are clearly unfounded or excessive. Remember that we cannot provide or delete photos, because we never receive them.

14. Notice for US residents

Residents of some US states, including California, Colorado, Connecticut, Virginia and others with consumer privacy laws, have rights to know what personal data we collect, to access it, to correct it, to delete it and to opt out of its sale, sharing for cross-context behavioural advertising or profiling.

• The categories we collect are identifiers (name, email address), commercial information (purchase records), internet activity limited to request logs, and the content of messages you send us. Sections 4 and 6 describe sources and purposes.
• We do not sell personal data and we do not share it for cross-context behavioural advertising. We do not use it for profiling that produces legal or similarly significant effects.
• We do not collect sensitive personal information as defined by those laws.
• You can use your rights by emailing support@shelfpics.com. You may use an authorised agent, and you can appeal a decision by replying to our answer. We will not treat you differently for using your rights.

15. Children

The Service is for adults. You must be at least 18 years old to create an account or buy a plan. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact support@shelfpics.com and we will delete it.

16. Cookies and browser storage

We use one strictly necessary cookie, shelfpics_session, to keep you signed in for up to 30 days. Your browser also stores your light or dark theme choice and caches the background-removal model files. We do not use analytics, advertising or tracking cookies. Full details are in our Cookie Policy.

17. Complaints

If you have a concern about how we handle your data, please contact us first at support@shelfpics.com and we will try to resolve it. You also have the right to complain to the data protection authority in your country, for example the Information Commissioner’s Office (ICO) in the UK (ico.org.uk), or the supervisory authority in the EU country where you live or work.

18. Changes to this policy

We will update this policy when the Service or the law changes, for example before adding a new provider or a new kind of data. The date at the top shows the latest version. If a change materially affects how we use your personal data, we will tell signed-in users by email or a notice in the Service before it takes effect.

19. Contact

{{LEGAL ENTITY}}, {{REGISTERED OFFICE}}, {{COUNTRY}}. Email: support@shelfpics.com. Support hours: Mon to Fri, 09:00 to 17:00 UTC. You can also use our contact form. Related documents: Terms of Service, Cookie Policy, Security and Refund Policy.