Introduction

RoastMyPic.ai respects your privacy. This policy explains how we collect, use, and protect your personal data.

Data controller

The data controller is Ghota Tech Solutions, publisher of the site. Its full details appear in the legal notice. For any question about your data, write to contact@roastmypic.ai.

Data Collected

We collect the following data:

Uploaded photos: The photo you upload, the retouched photos generated from it, the score and the texts produced.
Technical data: IP address, used to limit abuse and, in hashed form, to count only one vote per person; browser and device type.
Google account (optional): If you sign in with Google to comment: your display name, your email address and your account photo. Your comments and the username you choose are public.
Usage data: Pages visited, actions taken (only if you accept cookies).
Payment data: Handled directly by Stripe, which collects your payment details and your email address. We neither see nor store your card number: we keep the transaction reference, the product purchased, its amount and its date.

Cookies

We use the following types of cookies:

Essential cookies: Required for the site to work: the anonymous session that links your roasts to you, your language preference and, if you use it, your Google sign-in.
Analytics cookies: Google Analytics, via Google Tag Manager, to understand how the site is used. Can be disabled.

You can manage your preferences via the consent banner. Analytics cookies are only loaded after your consent.

Data Usage

Provide and improve our services
Analyse and retouch your photos with Google Gemini
Understand site usage (with consent)
Prevent fraud and abuse

Legal bases for processing

Each processing operation rests on a specific legal basis:

Performance of the contract: analysing and retouching your photo, delivering the content purchased, processing the payment, publishing your comments.
Legitimate interest: service security, fraud and abuse prevention, aggregated audience measurement.
Legitimate interest as well for the public display of roasts and retouched photos, together with a right to object that can be exercised in one click, at any time.
Consent: analytics cookies, which you may refuse or withdraw at any time.
Legal obligation: retention of the accounting records tied to your payments.

Photos shown on the site

By default, a roast is public: the original photo, its score and the roast sentence appear in the leaderboard, and the retouched photos, together with the original photo, may illustrate the site, in particular its home page. No name or identity data accompanies these photos. You can remove a roast from the leaderboard, hide a retouched photo or delete everything at any time, from your result page or your profile: the effect is immediate.

Data Sharing

We only share your data with:

Google Gemini: Google (Gemini): analysis and retouching of photos. On the paid plan we use, Google does not use your photos to train its models.
Google Analytics: Anonymized usage statistics (if consented)
Stripe: Secure payment processing

Transfers outside the European Union

Our processors Google (hosting, artificial intelligence, audience measurement) and Stripe (payment) may process data in the United States. These transfers are covered by the European Commission's standard contractual clauses and, for certified entities, by the EU–US Data Privacy Framework.

Data Retention

Photos, roasts, retouched photos, votes and comments are deleted automatically 30 days after the roast is created, including those shown on the site. Payment records (reference, product, amount, date) are kept for the legal retention period for accounting records. Your Google account information is not covered by this automatic deletion: write to us to have it erased. You can request deletion of your data at any time.

Your Rights (GDPR)

Under GDPR, you have the following rights:

Right to access your data
Right to rectification
Right to erasure
Right to data portability
Right to object
Right to restriction of processing
Right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected

To exercise these rights, contact us at: contact@roastmypic.ai

Security

We use technical and organizational security measures to protect your data: HTTPS encryption, secure tokens, restricted access.

Changes

This policy may be updated. The last modification date is indicated at the top of the page.

Contact

For any questions about your personal data:
Email: contact@roastmypic.ai

Privacy Policy