Privacy Policy
Last Updated: 2026
📌 Table of Contents
- 01. About the Service
- 02. What Data We Collect
- 03. Images with Human Faces
- 04. Legal Grounds for Processing
- 05. Purposes of Processing
- 06. Data Transfer to Third Parties (Subprocessors)
- 07. International Data Transfer
- 08. Retention Periods
- 09. Security
- 10. Cookies and Analytics
- 11. Your Rights
- 12. Minors
- 13. Changes to Policy
- 14. Contact Us
01. About the Service
ReCardEx ("we", "us", "our") is an AI service for generating professional product photos for marketplaces, available at recardex.com.
The data controller responsible for your personal information is:
Chernyshova Olena d/b/a ReCardEx
Address: 16521 Lake Brigadoon Circle, Tampa, FL 33618, USA
Contact: privacy@recardex.com
By using the service, you agree to the terms of this Policy. If you do not agree, please stop using it.
02. What Data We Collect
- Account Data: email, name (optional), hashed password, OAuth identifiers (Google, etc.)
- Payment Data: transaction history, coin balance (Coins). Card details are not stored — processed by Stripe.
- User Content: uploaded product images, images with faces, selected styles, presets, generated images and videos.
- Technical Data: IP address, browser, OS, activity logs, errors.
03. Images with Human Faces
If you upload images containing human faces:
Model and environment reference images may be stored as part of the generation record and transmitted to AI providers only to fulfill the current generation request.
- We do not identify the person and do not use face recognition technologies. Any processing is ephemeral and strictly to generate the requested output.
- Images are used only to fulfill the current request.
- They may be shared with AI providers (see section 6).
- Not used for training our models or third-party foundation models without your separate consent.
- Your Responsibility: you confirm that you have obtained consent from the depicted persons.
04. Legal Grounds for Processing
| Ground | Description |
|---|---|
| Contract Execution | Providing access to the service and generating images. |
| Consent | Analytical cookies, marketing, certain face processing. |
| Legitimate Interest | Security, fraud prevention, service improvement. |
| Legal Obligation | Storing financial records (7 years), responding to legal requests. |
05. Purposes of Processing
- Providing AI generation
- Account management and authentication
- Processing payments and coin balance
- Technical support
- Security and anti-fraud
- Service improvement (anonymous analytics)
- Transactional notifications
06. Data Transfer to Third Parties (Subprocessors)
We do not sell your personal information. We share your data with Service Providers strictly for the business purpose of providing our AI generation services. These providers are contractually restricted from using your data to train their own foundation models.
Current list of subprocessors is always available at:
👉 recardex.com/legal/subprocessors
07. International Data Transfer
Your data may be transferred to the USA, EU, Asia, and other countries.
For users from EU/EEA/UK/Switzerland: transfer is based on Standard Contractual Clauses (SCC).
08. Retention Periods
| Category | Period |
|---|---|
| Account data | Until account deletion |
| Uploaded/Generated images | As long as your account is active. Older files may be periodically deleted (minimum 30 days guaranteed availability). |
| Payment history | 7 years |
| Technical logs | Up to 3 months |
09. Security
- HTTPS/TLS, bcrypt hashing
- Row-Level Security in DB
- Access by "need to know" principle
10. Cookies and Analytics
Necessary cookies (login, security). Analytical cookies (only with consent).
11. Your Rights
Access, Correction, Deletion, Export, Objection, Restriction, Withdrawal of consent.
Contact: privacy@recardex.com. Response within 30 days.
12. Minors
Our service is intended for individuals over 18. We do not knowingly collect personal data from children. If you are a parent and believe your child provided us with data, contact us, and we will delete it immediately.
13. Changes to Policy
We may update this Policy periodically. In case of significant changes, we will notify you via email or a prominent notice on our website. The "Last Updated" date indicates when the policy was revised.
14. Contact Us
📧 privacy@recardex.com