Skip to content
Pastlume
Back to Pastlume

Privacy policy

What we collect, why, how long, and your rights.

Last updated: [DATE]

Controller

[SELLER LEGAL NAME, legal form, registered address, registration number (SIREN/SIRET), VAT number]. Contact for privacy requests: contact@pastlume.io.

What we process

  • Your photos and results, to provide the restoration you request.
  • Your email address and account identifier, to link your photos and purchases to your account: to send your sign-in code, delivery and receipts.
  • Payment information, handled by Stripe. We never see your card number.
  • Technical data: session cookies that maintain your sign-in, a salted hash of your IP address for abuse prevention, and anonymous usage events (no photos, file names or emails).

How long

  • Unpurchased photos and previews: 24 hours.
  • Purchased photos and results: 30 days after you unlock a result for download.
  • You can delete any photo at any time from its page.
  • Order and invoicing records: as long as required by accounting law. [Specify.]
  • Technical backups: [specify the backup retention of the database/storage provider].

Who processes data for us

[List each processor with its role, location and transfer mechanism, after checking their current terms: Vercel (hosting), Supabase (database, storage, authentication), Replicate and the model provider it routes to (image processing), Stripe (payments), Resend (emails), Cloudflare Turnstile (bot protection).] Replicate states that API prediction inputs and outputs are deleted after about one hour by default.

We do not use your photos to train AI models. [Only keep the next sentence if verified contractually for every intermediary:] Our providers do not use them for training either.

Cookies

We use only cookies necessary for the service: the photo session cookie and, when you sign in, the authentication cookies. No advertising or analytics cookies. Cloudflare Turnstile may process technical signals to detect bots.

Your rights

You can access, correct, delete or export your data, and object to processing, by writing to contact@pastlume.io. You can also complain to your data protection authority (in France, the CNIL).

Marketing

We only send transactional emails (codes, deliveries). We will never send promotional emails without your prior consent.