Privacy Policy
Last Updated: 2026
📌 Table of Contents
- 01. About the Service
- 02. What Data We Collect
- 03. Images with Human Faces
- 04. Legal Grounds for Processing
- 05. Purposes of Processing
- 06. Data Transfer to Third Parties (Subprocessors)
- 07. International Data Transfer
- 08. Retention Periods
- 09. Security
- 10. Cookies and Analytics
- 11. Your Rights
- 12. Minors
- 13. Changes to Policy
- 14. Contact Us
01. About the Service
ReCardEx ("we", "us", "our") is an AI service for generating professional product photos for marketplaces, available at recardex.com.
By using the service, you agree to the terms of this Policy. If you do not agree, please stop using it.
02. What Data We Collect
- Account Data: email, name (optional), hashed password, OAuth identifiers (Google, etc.)
- Payment Data: transaction history, coin balance (Coins). Card details are not stored — processed by Stripe.
- User Content: uploaded product images, images with faces, selected styles, presets, generated images and videos.
- Technical Data: IP address, browser, OS, activity logs, errors.
03. Images with Human Faces
If you upload images containing human faces:
Model and environment reference images may be stored as part of the generation record and transmitted to AI providers only to fulfill the current generation request.
- We do not identify the person and do not use face recognition technologies.
- Images are used only to fulfill the current request.
- They may be shared with AI providers (see section 6).
- Not used for training our models without your separate consent.
- Your Responsibility: you confirm that you have obtained consent from the depicted persons.
04. Legal Grounds for Processing
| Ground | Description |
|---|---|
| Contract Execution | Providing access to the service and generating images. |
| Consent | Analytical cookies, marketing, certain face processing. |
| Legitimate Interest | Security, fraud prevention, service improvement. |
| Legal Obligation | Storing financial records (7 years), responding to legal requests. |
05. Purposes of Processing
- Providing AI generation
- Account management and authentication
- Processing payments and coin balance
- Technical support
- Security and anti-fraud
- Service improvement (anonymous analytics)
- Transactional notifications
06. Data Transfer to Third Parties (Subprocessors)
Current list of subprocessors is always available at:
👉 recardex.com/legal/subprocessors
07. International Data Transfer
Your data may be transferred to the USA, EU, Asia, and other countries.
For users from EU/EEA/UK/Switzerland: transfer is based on Standard Contractual Clauses (SCC).
08. Retention Periods
| Category | Period |
|---|---|
| Account data | Until account deletion |
| Uploaded/Generated images | 6 months |
| Images with faces | 30 days |
| Payment history | 7 years |
| Technical logs | Up to 3 months |
09. Security
- HTTPS/TLS, bcrypt hashing
- Row-Level Security in DB
- Access by "need to know" principle
10. Cookies and Analytics
Necessary cookies (login, security). Analytical cookies (only with consent).
11. Your Rights
Access, Correction, Deletion, Export, Objection, Restriction, Withdrawal of consent.
Contact: privacy@recardex.com. Response within 30 days.
14. Contact Us
📧 privacy@recardex.com