Privacy Policy

Effective October 8, 2026

What we collect

Account: if you sign up with email, your email address; with Google, X or Discord, that account’s unique ID, name, profile picture and email (when the service shares it). Passwords from older password accounts are kept only as irreversible hashes.
Profile and activity: your @handle, display name, bio and profile picture, and what you create or upload: prompts, generated work, uploaded photos, posts, comments, likes, follows, poll votes, messages and their photos, boards, references, characters, personas, storyboards and saved settings.
Contact and invitations: the email and message you send us and, if you joined through an invite, who invited whom plus the IP address at sign-up, used to detect abuse.
Collected automatically: IP address and the country derived from it, sign-in records, usage counts, generation records (model, count, credits used, result), the days you visit, and cookies. API keys are stored only as hashes. We never receive your passwords or posts on other services.
Usage statistics: the pages you open (address and title), when, where you came from (referrer, campaign tags), browser, device, operating system and language, your rough location derived from the IP address, a cookie identifier, and what you do with features (clicking Generate, which model, the result, which plan you pick, and the outcome and amount of a payment). See “Usage statistics (Google Analytics) and external transmission” below. Your email, name, handle, prompt text and member ID are not sent.
Consent records: that you agreed to the terms and privacy policy when you signed up, and when, and whether you agreed to receive event and news emails (optional).

Why we use it

Only to run your account, generate and store your work, provide community features, process payments and refunds, send service emails such as credit-expiry notices, manage free quotas and benefits, prevent abuse and spam, block harmful content and handle reports, answer your questions, and decide which features may be offered under each country’s law. Event and news emails go only to people who agreed to receive them. We do not sell data or share it with third parties for advertising.

Processors and international transfer

Processing that the service needs in order to work is handed to the companies below to perform our contract with you (processing and storage on our behalf). We do not ask for separate consent for that; we publish it here instead. Our contracts with these companies include data-protection measures, and we supervise them.
Processors in Korea (payments): card payments are processed by Korea PortOne Inc. (PortOne) and KG Inicis Co., Ltd. When you start a payment, your name, email and mobile number are passed to these two companies, and when it completes the payment approval details (payment number, amount, time) come back to us. We do not keep the mobile number on our servers, and the payment processor takes your card number directly in its payment window, so we never receive it. Payment records are kept for 5 years as Korean e-commerce law requires. Contact: KG Inicis Co., Ltd. privacy officer, 1588-4954 (Korea), private_inicis@kggroup.co.kr
Google, X and Discord verify your identity when you sign in with them; we receive only the account details above.
If we later take payments from abroad through a Merchant of Record (we do not today), that company (for example Paddle.com Market Limited, UK, 30 Old Bailey, London EC4M 7AU, privacy@paddle.com) will process the buyer’s name, email, country and payment details itself. We will update this policy and tell you before that happens.
Processors abroad (processing and storage on our behalf): the table below gives what is transferred, the country, when and how, who receives it and how to reach them, the purpose and how long it is kept, and how you can refuse and what refusing means. If you refuse a transfer, the feature that needs it may not work.
AI model calls: images can be made on Cloudflare Workers AI or on our own GPU server (South Korea). If you pick other models, such as video, speech or image editing, your prompt, the script to be spoken and any reference photos, videos or recordings you upload are sent to the model platforms (fal.ai and Runware in the table) and to the servers of the model makers they connect to, only to make your result. The result is copied to our storage; the platforms and makers may keep their copies for a time under their own terms. Uploaded photos pass a safety check before they are sent.

Recipient (country) · contact	What is transferred	When and how	Purpose · how long it is kept	How to refuse · what refusing means
Cloudflare, Inc. (USA; servers mainly in the US and Europe) · 101 Townsend St., San Francisco, CA 94107 · dpo@cloudflare.com	Everything the service handles about you (account details, prompts, your work and uploaded files, posts, comments and messages, IP address, sign-in and usage records)	Sent and stored over the network (HTTPS) whenever you use the service	Running servers, the database and file storage, safety checks on uploaded photos, receiving mail to our addresses, bot protection / kept for the periods under “Retention” below and deleted when you delete your account	The service cannot work without it, so there is no separate opt-out. To refuse, delete your account (Settings > Account); then you cannot use the service
Plus Five Five, Inc. (service name Resend; USA) · support@resend.com	Email address, sign-in codes and the text of notice emails	Sent over the network each time we send a verification or notice email	Sending verification codes and notice emails / until the sending is done (how long the processor itself keeps records is set by its own policy)	Needed for email sign-in and notices. If you sign up with Google, X or Discord, verification-code emails are not used
Google LLC (Google Analytics; USA) · policies.google.com/privacy	Usage statistics (page address and title, time, where you came from, browser, device, operating system and language, rough location, cookie identifier, how you use features; never your email, name, handle, prompt text or member ID)	Sent over the network by the page script (gtag.js) and our server, only for browsers that allowed it	Improving the service and understanding its use / up to 14 months at Google	Refuse with “Analytics settings” at the bottom of the page or in Settings; refusing changes nothing about what you can do
Features & Labels Inc. (fal.ai; USA) · support@fal.ai	Prompt, script to be spoken, reference photos, videos or recordings you upload (only when you pick such a model)	Sent over the network each time you ask that model to generate	Making the result (the platform may pass it on to the servers of the model maker it connects to) / until the generation is done; how long the platform itself keeps it is set by its own policy	If you do not pick such a model nothing is sent, and other features are not affected
Runware Ltd (UK) · Dns House, 382 Kenton Road, Harrow, Greater London HA3 8DP · support@runware.ai	Same as above	Same as above	Same as above	Same as above

Cookies and browser storage

Keeping you signed in (__Host-ps_s): 60 days, extended while you use the site, up to 180 days.
Guest usage and carrying guest creations into a new account (mg_g): 1 year.
Invite code (ps_ref): 30 days after you arrive through an invite link.
Usage statistics (_ga, _ga_SN9QRVR1E7, Google Analytics): 13 months; created only if you allow analytics.
Your analytics choice (ps_ac): remembers allow or refuse, 1 year.
First visit (ps_ft): remembers where you came from (referring domain, campaign tags) for 90 days and records it on your account if you sign up; created only if you allow analytics.
Consent at sign-up (ps_tc): remembers, for up to 30 minutes until the account is made, which version of the terms you agreed to on the sign-up screen and your choice about event and news email, and is deleted once the account exists. It is needed to sign up.
Language and display settings and your recent jobs stay in this browser’s storage and are not sent to our servers.

Usage statistics (Google Analytics) and external transmission

To improve the service and understand how it is used we use Google Analytics 4 from Google LLC (USA). It is not used for advertising; Google signals, ad personalization and data sharing with other Google products are switched off. More: https://policies.google.com/technologies/partner-sites
How: a script on the page (gtag.js) sends information from your browser to Google. What happens on our server (a sign-up, a purchase, a generation result) is sent by the server together with the same cookie identifier. Nothing is sent for a browser that has not allowed it.
What is sent: the address of the page you open (without anything that could identify you) and its title, the time, where you came from, browser, device, operating system and language, a rough location derived from your IP address (GA4 does not store IP addresses), the cookie identifier, and how you use features. Your email, name, handle, prompt text and member ID are never sent. The only purpose is improving the service and understanding its use.
Your choice: if you visit from the European Economic Area, the UK or Switzerland, nothing is sent until you press “Allow”. Elsewhere it is on by default and you can switch it off at any time with the “Analytics settings” link at the bottom of the page or in Settings, by deleting or blocking cookies in your browser, or with Google’s opt-out add-on (https://tools.google.com/dlpage/gaoptout). A Global Privacy Control signal from your browser counts as a refusal, and visitors from mainland China are not measured. Refusing changes nothing about what you can do.
Google keeps the data for up to 14 months. On our side we keep the analytics identifier linked to your account and your first-visit source until you delete the account.

Retention

Account and work: until you delete your account. Then we delete them, leaving only empty placeholders for your posts, comments and messages so other members’ conversations still make sense. Reported images under review are kept for up to 90 days, and reported messages until the review ends.
Credit history: kept for 5 years after you delete your account, as evidence for payments and refunds and for abuse investigations.
Video, audio and edit results and their job records: deleted 90 days after they are made; download what you want to keep.
Usage counts 90 days, sign-in and security records 1 year, generation records and visit days 1 year, notifications 1 year, support tickets 3 years, records of staff actions on member accounts 2 years.
Google Analytics usage data: up to 14 months at Google. The analytics identifier linked to your account and your first-visit source are deleted with the account.
For deleted accounts we keep only irreversible hashes of the email address and sign-in accounts, for 1 year, solely to stop the same person re-joining to collect the sign-up benefits again.
Once payments open, payment records are kept for 5 years as Korean e-commerce law requires.
Consent records: deleted with your account.

Your rights

In Settings you can download your data (access), edit your profile (correction) and delete your account (deletion). For a halt to processing or any other request, write to privacy@pickshot.ai. A legal representative can exercise the same rights.

Minors

People under 19 (under 18 outside Korea) cannot sign up. If we learn of one, we delete the account and its data.

Security

All traffic is encrypted with HTTPS, and sign-in sessions and API keys are stored only as hashes. Access to personal data is limited to the staff who need it to run the service, and their actions are logged.

Privacy officer

Privacy officer: the Pickshot operations team (privacy@pickshot.ai).

Changes

We announce changes to this policy on the site 7 days before they take effect. October 8, 2026: added the notice about usage statistics (Google Analytics). The same day we put processors and international transfers into a table (the five items the law requires us to publish) with more details on each company, and added the payment processors in Korea, records of your consent at sign-up, and credit-expiry emails.