Privacy Notice

Controller

Zakaria alaoui, trading as EstatePic, is the data controller for personal data processed through estatepic.com. Contact: contact@estatepic.com.

Data we collect and why

Account data (name, email, login credentials, Google/Apple sign-in identifiers): to create and secure your account — contract performance.

Photos you upload and generated outputs: to provide the enhancement service — contract performance.

Plan, credits and purchase status: to manage access — contract performance.

Support and contact messages: to answer you — legitimate interests.

Technical data (IP address, device and browser information, logs): for security, fraud prevention and service improvement — legitimate interests.

Language preference stored in your browser: to show the site in your language — legitimate interests.

Who we share data with

Service providers acting on our behalf: hosting, database and authentication, AI processing and email delivery.

Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing. Paddle processes payment data under its own privacy policy.

Professional advisers (legal, accounting) and authorities where required by law. We never sell your personal data.

International transfers

Some providers may process data outside Switzerland, the UK or the EEA. Where that happens we rely on adequacy decisions or standard contractual clauses.

Retention

Account data is kept while your account is active. Photos are deleted within 30 days after account closure. Contact messages are kept up to 2 years. Data is then deleted or anonymised, except where the law requires longer retention.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time, by writing to contact@estatepic.com. We reply within one month. You can also complain to your data protection authority (for example the FDPIC in Switzerland or the CNIL in France).

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level access restrictions on our database.

Cookies

We only use essential storage: your sign-in session and your language preference. We do not use advertising cookies. You can clear them in your browser settings; signing in will then be required again.