Privacy Policy

Who We Are

Photo2Ads is a product operated by West North Labs LLC ("Photo2Ads," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and retain information when you visit photo2ads.com, create an account, use the Photo2Ads Studio, purchase credits or a subscription, or contact us.

West North Labs LLC is the controller of the personal information described in this policy unless we state otherwise.

Scope

This policy applies to the Photo2Ads website, Studio, accounts, generation history, billing surfaces, public contact form, and related services that link to it. It does not govern third-party websites or services that you visit independently.

When you use an AI model through Photo2Ads, the selected generation provider also processes the material required to complete the request. Those providers have their own terms and privacy practices, which we summarize below without replacing them.

Information We Collect

We collect information in the following categories.

• Account information. Your name, email address, profile image, account identifiers, authentication method, session information, and account settings. If you use Google sign-in or Google One Tap, Google provides the basic account information you authorize.
• Customer Content. Product photos, optional person or avatar references, prompts, creative directions, generation settings, generated images and videos, favorites, saved files, and generation history. Customer Content may contain personal information if you include it.
• Billing and Credits information. Plan, purchase, subscription, credit grant and usage records, transaction identifiers, billing status, and limited payment metadata. Stripe processes payment-card details; Photo2Ads does not store complete card numbers or card security codes.
• Support information. Your selected topic, name, email address, message, and any information you choose to include when you contact us. Please do not send passwords, API keys, payment-card details, or other secrets.
• Usage and device information. Pages viewed, product interactions, approximate location derived from IP address, browser and device type, referring page, timestamps, diagnostic information, and performance or error events.
• Security information. IP address, request metadata, session and authentication events, rate-limit signals, suspected abuse indicators, and records needed to investigate fraud, misuse, or service failures.
• Cookies and similar technologies. Essential cookies, optional analytics cookies, and browser storage described in our Cookie Policy.

We do not intentionally collect sensitive personal information for the purpose of providing Photo2Ads. Avoid uploading government identifiers, financial credentials, health records, or other highly sensitive material.

How We Use Information

We use information to:

• provide, secure, maintain, and troubleshoot Photo2Ads;
• authenticate users and keep accounts and sessions working;
• process uploads, prompts, generations, downloads, history, and saved files;
• calculate, charge, grant, use, expire, or return Credits;
• process payments, subscriptions, receipts, billing questions, and tax or accounting obligations;
• respond to support, product, partnership, and press inquiries;
• prevent fraud, abuse, unauthorized access, and violations of our Terms of Service;
• measure public-page use and improve product usability when you allow analytics;
• communicate material product, account, security, billing, or policy changes; and
• comply with law, enforce agreements, and protect the rights and safety of Photo2Ads, our users, and others.

Depending on where you live, our legal bases may include performing our contract with you, your consent, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the service.

AI Generation and Customer Content

You retain your rights in Customer Content. We process it to provide the workflows you request, such as storing an uploaded product reference, sending inputs to the selected AI generation provider, returning the result, and displaying your history.

We do not use Customer Content to train Photo2Ads-owned models. Photo2Ads does not currently operate its own foundation model training program.

Generation requests are currently routed through KIE.ai and the underlying model selected for the job. Those companies may process prompts, references, settings, and outputs to operate, maintain, secure, or improve their services under their own terms. We do not promise that every third-party model provider follows a no-training policy unless we have a written agreement that says so. Do not submit content you are not permitted to share with those providers.

Before a generation request is submitted, its prompt is sent to Waffo for content-safety screening. Waffo receives the prompt text and limited request metadata needed to return an allow, review, or block decision. Waffo's content-safety documentation describes this scan as stateless and says the check does not store prompt text. Provider terms and practices can change, so avoid including secrets or sensitive personal information in prompts.

KIE.ai's currently published retention documentation states that generated media is retained for 14 days and task log data, including text or metadata, is retained for two months. Provider policies can change; see KIE.ai's current documentation before submitting sensitive commercial material.

Service Providers and International Processing

We use service providers to run Photo2Ads. Current categories include:

• Cloudflare for network delivery, security, Workers compute, D1 database storage, R2 object storage, and related infrastructure;
• Google for sign-in, Google One Tap, and, with your analytics choice, Google Analytics 4;
• Stripe for payment, subscription, fraud, and billing processing;
• Waffo for pre-generation prompt content-safety screening; and
• KIE.ai and routed model providers for requested AI image and video generation.

We may add, replace, or remove providers as the service changes. Providers process information under their own agreements and privacy policies. Because these providers operate globally, information may be processed in countries other than the one where you live. Where required, we rely on appropriate transfer mechanisms and provider contractual safeguards.

Cookies and Analytics

Essential technologies support authentication, security, billing handoffs, preferences, and requested Studio functions. Google Analytics 4 is optional and is blocked until you grant analytics consent where the production consent setting applies. You can accept, reject, or change that choice through our Cookie Policy.

We do not currently use Photo2Ads data for third-party behavioral advertising, and we do not sell personal information for money. Some privacy laws define "sale" or "sharing" more broadly; you may contact us if you have a jurisdiction-specific request.

Retention

We keep information only for as long as reasonably necessary for the purposes in this policy, subject to operational, contractual, security, and legal requirements.

• Account information and saved Customer Content are generally retained while your account remains active so you can use history, files, and recurring workflows. You can delete individual files from the Files area and contact us for a broader deletion request.
• Credit, purchase, subscription, tax, and payment records may be retained longer when needed for accounting, fraud prevention, dispute handling, and legal compliance.
• Support messages and security records are retained for as long as reasonably needed to resolve the request, prevent repeat abuse, establish or defend legal claims, and meet legal obligations.
• Backups and provider copies may remain until normal rotation or the provider's stated retention period ends. KIE.ai's currently published generation retention is described above.
• We may retain deidentified or aggregated information that can no longer reasonably identify you.

Deletion is subject to legal exceptions and technical retention cycles. Closing an account does not require us to erase transaction records that we must retain, and it does not control copies independently held by a third-party provider.

How We Disclose Information

We may disclose information:

• to the service providers described above so they can perform services for us;
• when you direct us to share it or use a third-party integration;
• to professional advisers, auditors, insurers, or potential transaction partners under appropriate duties of confidentiality;
• to comply with law, legal process, or valid government requests;
• to investigate fraud, security incidents, abuse, or threats to rights and safety; or
• as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not disclose Customer Content publicly unless you deliberately use a public-sharing feature or otherwise direct us to do so.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, scoped storage, encrypted network transport, secret management, and abuse controls. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or disclosure will never occur.

You are responsible for protecting your login method and for notifying us promptly if you suspect unauthorized account access.

Your Choices and Data Rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection, and to withdraw consent. These rights are not absolute and may be limited by identity-verification, legal, security, accounting, or operational requirements.

You can update some account information and delete individual stored files through Photo2Ads. For other requests, email support@photo2ads.com. We may ask for information reasonably necessary to verify that the request concerns you. You may also have the right to complain to your local data-protection authority.

You can change analytics consent through our Cookie Policy. You can cancel a subscription through the available billing controls; cancellation and data deletion are separate actions.

Children's Privacy

Photo2Ads is not directed to children under 13, and you must be at least 13 years old to use it. If you are under the age of legal majority where you live, a parent or legal guardian must review and agree to the Terms for you. If you believe a child has provided personal information without appropriate permission, contact us.

Changes to This Policy

We may update this Privacy Policy as Photo2Ads, our providers, or legal requirements change. We will post the revised policy here and update the "Last updated" date. If a change materially affects your rights, we will provide additional notice when reasonably appropriate.

Contact Us

For privacy questions or requests, use our contact page or write to:

West North Labs LLC — Photo2Ads Privacy, 287 West North Street, Dover, Delaware 19904, United States

support@photo2ads.com