Privacy Notice

Controller

Zakaria alaoui, trading as EstatePic, is the data controller for personal data processed through estatepic.com. Contact: contact@estatepic.com.

Data we collect and why

Account data (name, email, login credentials, Google/Apple sign-in identifiers): to create and secure your account — contract performance.

Photos you upload and generated outputs: to provide the enhancement service — contract performance.

Plan, credits and purchase status: to manage access — contract performance.

Support and contact messages: to answer you — legitimate interests.

Technical data (IP address, device and browser information, logs): for security, fraud prevention and service improvement — legitimate interests.

Language preference stored in your browser: to show the site in your language — legitimate interests.

Who we share data with

Service providers acting on our behalf: hosting, database and authentication, AI processing and email delivery.

Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing. Paddle processes payment data under its own privacy policy.

Professional advisers (legal, accounting) and authorities where required by law. We never sell your personal data.

International transfers

Some providers may process data outside Switzerland, the UK or the EEA. Where that happens we rely on adequacy decisions or standard contractual clauses.

Retention

Account data is kept while your account is active. Photos are deleted within 30 days after account closure. Contact messages are kept up to 2 years. Data is then deleted or anonymised, except where the law requires longer retention.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time, by writing to contact@estatepic.com. We reply within one month. You can also complain to your data protection authority (for example the FDPIC in Switzerland or the CNIL in France).

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level access restrictions on our database.

Cookies

Essential storage: your sign-in session, your language preference and your cookie choice.

Advertising measurement: with your consent, we use Google Ads measurement (Google Ireland Ltd / Google LLC) to count sign-ups coming from our ads and to measure and improve our advertising. Where the law requires it (EEA, UK, Switzerland, Quebec), no advertising cookie is set and no measurement data is sent before your choice; refusing keeps the service fully usable. You can accept, refuse or change your choice at any time via the cookie banner (reopen it from the link in our emails or by clearing your browser storage). See Google's business data protection site: https://business.safety.google/privacy/.