Privacy Policy

We process account identifiers such as your phone number, email address, name, profile image, and sign-in provider identifier when you choose the corresponding sign-in method.

We process source photos, selected templates, generation settings, AI-generated results, task status, credit activity, payment-order metadata, and basic technical logs needed to run and protect the service. Payment credentials are handled by the configured payment provider and are not stored by PhotoBox Studio.

We use this data to authenticate your account, accept uploads, perform safety checks, create requested images, keep credit and payment records, deliver private results, prevent abuse, troubleshoot failures, and support account deletion.

PhotoBox Studio does not sell your source photos or generated results, and does not make account-bound images public by default.

Uploaded source photos are scheduled for automatic deletion 30 days after upload. AI-generated results are scheduled for automatic deletion 180 days after creation. You can delete eligible originals and individual results earlier from your account.

Deletion may be delayed while a generation is active or while a short-lived backup or operational recovery copy expires. Deleted assets are no longer available through the product.

We may send the minimum required data to providers that perform authentication, storage, safety review, AI generation, payment processing, infrastructure, and operational monitoring. They may process data only for the contracted service and applicable legal duties.

Account-bound photos and results require an authenticated account and ownership check. We use access controls, limited retention, private storage paths, and operational monitoring to reduce risk. No internet service can guarantee absolute security.

You can view account activity, download or delete generated results, delete eligible original uploads, sign out, and request deletion of your account and associated data from the workbench.

You may stop using the service at any time. Some payment, refund, fraud-prevention, or legal records may need to be retained after account deletion where required by law.

We may update this policy when the product, providers, or legal requirements change. The updated date on this page indicates the current version, and material changes will be communicated through the service where required.