Privacy Notice

Daniel-Uko Lazar (trading as PicWaves) is the data controller for personal data processed through PicWaves. Contact: ukomedia@gmail.com.

What we collect and why

• Account data (name, email, login details, two-step codes setup) — to create and secure your account. Basis: contract.
• Purchase records (plan, credits, download counts) — to provide what you paid for. Basis: contract, legal obligation.
• Photos and instructions you send to AI features (small previews, text or voice commands) — processed to produce your result. Editing takes place in your browser. Basis: contract.
• Client delivery galleries — edited files and watermarked previews you choose to upload are stored privately for sharing with your client. Gallery passwords are stored as hashes. Full-quality downloads require the gallery owner's payment confirmation. Basis: contract.
• Saved styles and selection preferences — to reuse your taste in future work. Basis: contract.
• Technical data (IP address, device and browser, error logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages — to answer you. Basis: legitimate interests.

We do not sell your data and do not use your photos to train AI models.

Who we share it with

• Service providers: hosting, database, and AI processing providers that run our features.
• Paddle, our Merchant of Record, for sales, subscription management, payments, tax and invoicing.
• Professional advisers (legal, accounting) when needed.
• Authorities, where required by law.

International transfers

Some providers process data outside the EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.

How long we keep it

Account data is kept while your account is active. Previews sent to AI are not stored after processing. Purchase records are kept as long as tax law requires. Data we no longer need is deleted or anonymised.

Client delivery files remain stored until the gallery owner deletes the gallery. The owner can disable its link or delete the gallery and its files from Client galleries.

Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, object to processing and withdraw consent. Email us and we reply within one month. You can also complain to the Romanian data protection authority (ANSPDCP) or your local authority.

Security

We use encryption in transit, access controls, and optional two-step login codes to protect your data.

Cookies

We only use essential storage needed to keep you signed in and to run checkout. No advertising or analytics cookies.