picsha.ai

Privacy Policy

Last updated: August 10, 2026

At Picsha AI ("we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website or use our services, including our API, dashboard, and AI-assistant integrations.

1. Information We Collect

We collect information that you provide directly to us, such as when you create an account, subscribe to our newsletter, or contact us for support. This may include:

  • Contact information (name, email address, company name)
  • Account credentials (passwords, API keys)
  • Payment information (processed securely by our payment providers; we do not store full card numbers)
  • Content you upload to our service (images, metadata)
  • Usage information generated when you use the service (API request logs, IP addresses, browser and device information)

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send you technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and requests
  • Monitor usage, enforce quotas, and protect the service against abuse

3. AI Processing of Uploaded Content

Picsha is an AI-powered digital asset management service. When you upload an image, we process it automatically to provide the features you request. This includes malware scanning, metadata extraction, AI-generated labels and descriptions, image-quality analysis, content-moderation screening, and generative transformations you explicitly request (such as background removal or fill). This processing is performed to deliver the service to you. We do not sell your content, and we do not use your content to train generalized AI models.

4. Third-Party Service Providers

We share information with a limited set of service providers only as needed to operate the service:

  • Amazon Web Services — cloud infrastructure, file storage, and image-analysis services
  • Clerk — account authentication and sign-in
  • Stripe — payment processing

These providers process data on our behalf under their own contractual and security obligations. We do not sell or rent your personal information to third parties.

If you connect Picsha to a third-party AI assistant (for example, via our MCP connector for Claude or similar integrations), that assistant accesses your Picsha data only after you explicitly authorize it through an OAuth consent flow or an API key you control, and only within the scope of your account. Data the assistant retrieves is handled according to that provider's own privacy policy. You can revoke this access at any time from your account settings or by rotating your API keys.

5. Data Retention

  • Account information is retained for as long as your account is active.
  • Uploaded content is retained until you delete it or your plan's storage terms expire. Deleted assets are moved to a trash area with a limited recovery window, after which they are permanently purged from our systems.
  • API request logs are retained for a limited period for security, billing, and debugging purposes.
  • Account deletion: when you close your account, or on request to the contact below, we delete your personal information and uploaded content, except where retention is required for legal, billing, or security purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information, including encryption in transit, scoped API keys, and per-organization isolation of stored content. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.

7. Your Rights

You may access, correct, export, or delete your personal information at any time through your account dashboard, or by contacting us at the address below. Depending on your jurisdiction, you may have additional rights under applicable data-protection laws (such as the GDPR or CCPA), and we will honor verified requests accordingly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date above. Material changes will be communicated to account holders by email or an in-product notice.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: hello@picsha.ai