Skip to content
AdVariqAdVariq

Privacy Policy

title: Privacy Policy description: Shot2Ad data handling standards, third-party processors, and privacy protection commitments date: 2026-09-18

1. Introduction and Scope

Shot2Ad ("we", "us", or "our") respects the privacy and confidentiality of your commercial assets and personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you visit our website, utilize our API endpoints, and create marketing imagery in the studio workspace.

By accessing or using Shot2Ad, you acknowledge the data handling practices outlined in this policy.

2. Information We Collect

To provide professional commercial image generation services, we collect only data essential for service fulfillment:

  • Account and Identity Information: Email address, username, avatar (if provided), and session tokens managed via the Better Auth authentication framework.
  • Product Assets and Creative Inputs: Uploaded product photographs, reference scene images, prompt text, design configurations, batch settings, and generation histories.
  • Billing and Transaction Records: Plan selection, credit pack purchase logs, order reference IDs, and payment timestamps. Important Note: Credit card numbers and sensitive payment data are handled directly and securely by compliant payment gateways (such as Stripe, Creem, or Waffo). Shot2Ad never captures or stores full credit card numbers on its servers.
  • Device and Operational Logs: IP addresses, browser specifications, operating system details, access timestamps, error tracebacks, and operational telemetry used for fraud prevention and edge performance monitoring.

3. How We Use Your Information

We use collected information solely for legitimate operational and technical purposes:

  • Service Delivery: Executing multi-step AI generation pipelines to produce finished commercial static ads and e-commerce scenes;
  • Studio Asset Management: Powering your private studio history, enabling high-resolution asset downloads, and tracking credit balances;
  • User Support and Communications: Delivering magic login links, order confirmations, balance alerts, and technical support responses;
  • Security and Compliance: Detecting automated abuse, filtering infringing or prohibited content, and safeguarding system resilience;
  • Edge Performance Optimization: Analyzing aggregated and anonymized metrics to minimize latency across our global edge endpoints.

4. Third-Party Service Providers and Data Transfers

To maintain edge-first speed and robust model infrastructure, we partner with industry-leading cloud and AI providers under strict data protection and confidentiality agreements:

  • Edge Infrastructure and Cloud Storage: Cloudflare, Inc. (Workers runtime, D1 relational databases, KV cache, and R2 distributed object storage) ensuring end-to-end encrypted storage and transfer;
  • AI Inference Infrastructure: Enterprise inference partners including Google Cloud (Vertex AI), OpenAI, Fal.ai, and APIMart. When you initiate a generation run, prompt text and necessary reference images are transmitted over secure TLS connections solely for image synthesis. These partners are bound by strict enterprise privacy obligations and do not use your private commercial uploads to train public foundation models;
  • Payment Processing: Stripe, Creem, and Waffo handle checkout transactions compliant with PCI-DSS standards;
  • Transactional Email: Resend and Cloudflare Email for reliable delivery of authentication and critical billing receipts.

5. Data Retention and Protection

  • Storage Security: All communications employ TLS/HTTPS encryption in transit, with asset data stored in isolated Cloudflare R2 object buckets.
  • User Control: You may delete generated images or batches from your studio workspace at any time. Deleted assets are removed from active access and purged according to storage lifecycle policies.
  • Account Deletion: Upon receiving a valid account deletion request, we permanently wipe your account profile and uploaded assets, excluding transactional accounting records required by law.

6. Your Data Rights

Depending on your jurisdiction, you may exercise the following rights regarding your personal information:

  • Access and Portability: View and download your profile data and historical generated imagery directly from the studio;
  • Rectification: Update your profile details in Account Settings at any time;
  • Deletion (Right to be Forgotten): Request full account deletion and asset purging via support channels;
  • Opt-out: Unsubscribe from non-essential promotional messages using the unsubscribe link in email footers.

7. Policy Updates

We may update this Privacy Policy from time to time to accommodate new features or regulatory obligations. Updates will be posted on this page with an updated "Last updated" date. For substantial changes, notice will be provided via website banners or direct email.

8. Contact Us

If you have questions, feedback, or data privacy requests, contact us:

  • Online inquiry: Contact Us
  • Privacy Email: support@shot2ad.com