Privacy Policy

1. Overview

Shotari ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service at shotari.com.

2. Information We Collect

Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.

Usage data: We log AI generation requests (model used, credit cost, timestamp) to maintain your credit balance and prevent abuse.

Payment data: Payments are processed by Creem. We receive transaction identifiers and order metadata (pack name, credits purchased) but do not store your card details.

Uploaded images: Images you upload are processed in memory to generate AI results and are not permanently stored on our servers beyond the duration of your session.

3. How We Use Your Information

• To provide and operate the Service (account management, credit tracking)
• To process payments and fulfill credit purchases
• To enforce our content policies via automated moderation
• To send transactional emails (receipts, credit confirmations)
• To improve the Service and diagnose technical issues

We do not sell your personal data to third parties.

4. Third-Party Services

We work with the following third-party providers:

• Google OAuth — Authentication
• Creem — Payment processing
• OpenRouter / OpenAI — AI image generation
• Neon — Database hosting (PostgreSQL)

Each provider processes data according to their own privacy policies.

5. Data Retention

We retain your account and credit transaction data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Withdraw consent for data processing
• Lodge a complaint with a supervisory authority (EU/EEA users)

To exercise these rights, contact support@shotari.com.

7. Cookies

We use essential cookies to maintain your session. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this may affect your ability to sign in.

8. Security

We implement industry-standard security measures including SSL encryption, server-side session management, and HMAC-verified webhooks. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

The Service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes indicates acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact us at support@shotari.com.