Privacy Policy

1. Who is responsible

Tengzhou Lingshun Yuanshi Jiaoyu Zixun Gongzuoshi, an individually owned business operating in China, is responsible for personal data processed by this website. Business location: Tengzhou, Shandong, China. Privacy and support contact: contact@photocraft.digital. This policy covers photocraft.digital, not the independent upstream editor project or linked websites.

2. Local editing and optional online AI

Ordinary editor files are read and edited on your device, and saving downloads them to your device. Browser preferences and brush presets may be stored in localStorage or IndexedDB. This does not provide document autosave or crash recovery.

If you choose an AI feature, your prompts, selected attachments and explicitly shared document context may be sent through our backend to DeepSeek or KIE and the selected image model provider. Context may include layer names, text, dimensions and properties. Canvas previews or selected layer pixels are shared only when you choose to share them. We do not automatically upload every document you open.

Paid AI, payment and identity processing described here applies when those optional features are enabled and you use them. Publishing this policy does not mean those features are already available.

3. Information we collect and why

Guest session identifiers, wallet identifiers, balances and credit activity support access control and metered service delivery. When you purchase, we receive order identifiers, purchased packs, amount, currency, payment status and the billing or receipt email supplied by the payment service. We use these for delivery, reconciliation, recovery, refunds and fraud prevention.

Optional Google sign-in provides a stable Google subject identifier, verified email and basic identity information authorized by you. We do not request Gmail mailbox access, store a Google password or read your email messages. Email recovery uses short-lived verification links. Support emails contain your email address and the information you send us.

AI request records can include submitted prompts, shared context, generated results, selected model and settings, usage, task states, timestamps and credit charges. Infrastructure logs may include IP addresses, request paths, browser information and errors. We use these to operate, secure, troubleshoot and account for the service.

Where GDPR applies, service delivery and payments rely on contract performance; security and support may rely on legitimate interests; accounting and regulatory retention rely on legal obligations; optional tracking or marketing relies on consent where required. We do not send marketing messages without an applicable lawful basis.

4. Service providers and payments

Cloudflare hosts the website and, when AI is enabled, provides Workers, D1, private R2 storage and queues. DeepSeek processes Agent model requests. KIE processes and routes image requests to the selected model provider. A configured transactional email provider such as Resend may deliver recovery and service emails. We share only information needed for these functions.

Waffo Pancake handles checkout and payments as merchant of record. Card numbers and security codes go to Waffo and its payment partners, not our application database. We receive payment records needed to fulfill orders and handle billing. Waffo processes its data under its own privacy terms.

We do not use submitted content to train our own models. External AI providers process content under their own API terms and privacy policies; consult the provider disclosures before submitting sensitive material. We do not represent that all suppliers retain no content or have identical training policies.

We may disclose necessary records to comply with law, protect rights, investigate fraud or support a business transfer with appropriate safeguards. We do not sell personal information for money. Advertising disclosures and applicable opt-out rights are explained below.

5. Cookies, analytics and advertising

Necessary secure cookies maintain guest or linked sessions. The editor also stores local preferences. Deleting this storage can remove guest wallet access; retain receipts and use supported verified recovery.

We use Google Analytics 4 to measure website visits and selected navigation and download events. Google can process page URLs, referrers, browser and device information and connection data, and may set analytics cookies. Google Signals and ad personalization are disabled in our tag configuration. We do not intentionally send prompts, image contents, document text, payment tokens or email addresses to analytics.

Eligible content pages use Adsterra advertising. The advertising provider may process IP addresses, browser information and storage identifiers for delivery and measurement under its own policy. The editor and legal pages do not display ads. We do not send user images or AI prompts to the advertising network. Advertising identifiers may qualify as sharing under some privacy laws; applicable consent and opt-out requirements remain in force.

You can manage cookies in browser settings and use available consent controls. Blocking optional tracking should not prevent local editing. Browser settings do not delete server-side orders or wallet records. We do not currently send promotional email campaigns; essential receipts and security or recovery messages are separate.

6. Retention and deletion

When AI is enabled, generated image downloads and conversation messages are ordinarily retained for up to 30 days. Uploaded reference images are retained for up to 24 hours; uploads not submitted to a task expire after 1 hour. Download results you wish to keep. A task under active dispute or a legal preservation obligation may require a limited longer retention.

Browser sessions expire after 30 days of inactivity, subject to a maximum lifetime of 180 days. Recovery challenges expire after 10 minutes. Removing cookies does not remove your balance or statutory records. Wallet and linked identity records remain while needed to provide access, or until an eligible deletion request is fulfilled.

We retain order, tax and credit ledger records for applicable statutory accounting and dispute periods. The exact statutory period depends on the record and jurisdiction; these records are restricted rather than erased when legal retention is required. Support correspondence is reviewed for deletion within 12 months after resolution; operational security logs are ordinarily retained up to 90 days, except where needed to investigate abuse or meet a legal obligation.

Contact us for deletion. We aim to respond to privacy requests within 30 calendar days, subject to lawful extensions. Verification is required to protect other users' wallets. Records we must retain are excluded from routine deletion and are not used for unrelated purposes.

7. International processing and security

We operate in China and use global hosting, AI, payment and email services. Depending on the selected provider, data may be processed in China and other countries with different privacy laws. Where legally required, appropriate transfer mechanisms and provider agreements must be in place; we do not claim certifications or signed standard contractual clauses that have not been verified.

We use HTTPS, access controls, private asset storage and server-side secret management. Session and recovery tokens are stored in hashed form and sensitive application content is encrypted where implemented. No system is perfectly secure. We will assess incidents and provide notifications to users and authorities where required by applicable law.

8. Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, portability or an objection to certain processing, and may withdraw consent for optional processing without affecting earlier lawful processing. Send requests to contact@photocraft.digital. You may complain to your competent privacy regulator and exercise legally protected rights without discrimination.

Paid AI services are intended for adults aged 18 and over. We do not knowingly collect personal data from children through paid AI services. Contact us if you believe a child has submitted personal information so we can investigate and take appropriate action.

9. Updates and contact

We publish changes here with a new date. Material changes will be announced on the website and, where appropriate and available, by email. Contact Tengzhou Lingshun Yuanshi Jiaoyu Zixun Gongzuoshi at contact@photocraft.digital, business location Tengzhou, Shandong, China.

Provider privacy information

Cloudflare · Waffo · DeepSeek · KIE · Resend · Google · Adsterra