Legal
Privacy Policy
Last updated: 2026-07-25
1. Scope
This policy explains what personal data PedestalShot collects, why we collect it, and the choices you have. It applies to visitors and account holders of pedestalshot.com.
2. Who can use the service
The service is intended for business use by adults. It is not directed at children, and we don't knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we'll remove it.
3. What we collect
Account data (email address, display name, authentication details); the product photos you upload and the images we generate from them; billing metadata from Stripe such as plan, subscription status, and payment history — never full card numbers; and product-usage events such as feature actions, timestamps, and plan tier.
4. How we use your data
We use this data to operate your account, generate and deliver images, process payments, meter and enforce your credit balance, prevent abuse — for example, blocking disposable email addresses, capping signups per IP address, and detecting duplicate uploads — maintain audit logs, and improve the service. We do not sell your personal data.
5. How your images are handled
Your uploads and generated images are stored privately with per-user access controls and are only ever served to you through short-lived signed URLs. To generate images, we send your uploaded photo to Google's Gemini API; Google processes it under its own API terms to return the generated result. We don't share your images with any other party.
6. Service providers we use
We rely on Supabase (database and file storage), Stripe (payment processing), Google (AI image generation), Vercel (application hosting), and Inngest (background job processing) to run the service. If enabled, we also use PostHog (product analytics) and Sentry (error monitoring). Each provider only receives the data it needs to perform its function, under its own privacy and security terms.
7. Analytics and cookies
Product analytics (PostHog) is optional and off by default; if enabled, it records feature-usage events with identifiers and categorical metadata only — never image content, signed URLs, or free-text input. Authentication relies on essential session cookies required for the service to function. We don't use third-party advertising or tracking cookies.
8. Retention
We retain your account data and content while your account is active. Retention periods after account closure are configurable placeholders pending legal review, and are subject to the financial and audit record-keeping requirements described below.
9. Deletion
You can delete your account at any time. Deletion revokes your access immediately and schedules your stored images and personal data for deletion, except records we're required to keep for financial reporting, tax, or audit purposes.
10. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us using the details below to exercise these rights.
11. Security
We use per-user access controls, private storage, signed URLs, and audit logging of account and administrative actions to protect your content. No system is completely secure, and we can't guarantee absolute security.
12. Changes to this policy
We may update this policy as the service evolves. We'll update the "Last updated" date above, and for material changes we'll make a reasonable effort to notify active account holders before they take effect.
13. Contact
Privacy questions or requests: [email protected].