Privacy Policy

1. Information We Collect

a. Account Information

When you create an account, we collect your name, email address, and profile photo (if provided). Account creation and authentication are handled by Clerk (clerk.com). We store a reference to your Clerk user ID in our own database.

b. Photos and Media You Upload

We store the photos, audio, and other media you upload to the Service. Files are stored on Cloudflare R2 (cloud object storage). We process your photos solely to generate your slideshow videos — applying transitions, music, beat-sync timing, and optional effects like Ken Burns zoom. We do not use your photos to train AI models.

c. Payment Information

Subscription and one-time payments are processed by Stripe (stripe.com). We do not store your credit card number or CVV. We store your Stripe customer ID and subscription status to manage your account.

d. Usage Data

We collect log data including IP addresses, browser type, pages visited, and feature usage. This helps us diagnose issues and improve the Service.

e. Cookies

We use strictly necessary cookies for authentication (set by Clerk). We use analytics cookies (PostHog or similar) only with your consent. You can manage cookie preferences via the cookie consent banner shown on your first visit.

2. How We Use Your Information

• To provide, operate, and improve the Service
• To process your uploaded photos and generate slideshow videos with music and transitions
• To publish content to social media platforms on your behalf (only when you explicitly authorize it)
• To process payments and manage your subscription or one-time purchase
• To send transactional emails (account confirmations, receipts, payment failures)
• To respond to support requests
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To comply with legal obligations

We do not sell your personal information. We do not use your photos or videos to train AI models without your explicit consent.

3. Third Parties Who Receive Your Data

All providers are contractually obligated to protect your data and are prohibited from using it for their own marketing or to sell to third parties.

4. YouTube API Services

QuickPics uses YouTube API Services to enable publishing slideshow videos directly to YouTube on your behalf. By connecting your YouTube account, your use of those services is also governed by the Google Privacy Policy.

• We store an encrypted OAuth access and refresh token to publish on your behalf. We do not store YouTube channel data beyond what is needed to complete the requested publish action.
• YouTube data (video metadata, publish status) retrieved via the YouTube API is used only to provide the publishing feature and is not retained beyond 30 days.
• We do not sell or transfer YouTube data to third parties.

Revoking YouTube access: You can disconnect your YouTube account from QuickPics at any time in Settings → Social Accounts. You can also revoke access directly via your Google Account security settings.

Deleting YouTube data: To request deletion of any YouTube data we hold, email [email protected]. We will delete it within 30 days.

5. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Uploaded photos and generated videos: Retained while your account is active. Deleted within 30 days of account deletion or plan downgrade below storage limit.
• Payment records: Retained for 7 years per IRS requirements.
• Server logs: Retained for 90 days.
• Analytics data: Retained for 12 months, then anonymized.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate data.
• Deletion: Request that we delete your account and associated data.
• Portability: Request your data in a machine-readable format.
• Opt-out of analytics: Withdraw consent for non-essential cookies at any time via the cookie settings link in the footer.
• CCPA (California residents): You have the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Data Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest on Cloudflare R2, JWT-based authentication via Clerk, and role-based access controls. No method of transmission or storage is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR Article 33.

8. International Data Transfers

Our services and third-party providers operate in the United States. If you are located in the European Economic Area (EEA) or United Kingdom, your data is transferred to the US under Standard Contractual Clauses (SCCs) or other approved transfer mechanisms. By using the Service, you consent to this transfer.

9. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

Maine Winters LLC
Maine, United States
[email protected]