Photobooth AI Privacy Policy

Photobooth AI website and mobile applications are developed by Premier Octet.

It is Photobooth AI's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://photobooth-ai.app/, and other sites we own and operate.

This policy is effective as of Monday, March 25th, 2024 and was last updated on Monday, April 27th, 2026.

Photos upload

To upload photos to this site, you must ensure that they are of yourself, that you own the rights to them, and that they are not naked or pornographic. We are not responsible for any harm that may result from uploading photos that do not meet these criteria.

Information We Collect

Information we collect includes both information you knowingly and actively provide us when using or participating in any of our services and promotions, and any information automatically sent by your devices in the course of accessing our products and services.

Face Data

Our app collects a photo of the user for the purpose of creating an AI-enhanced version of the photo. This is the only face data that we collect.

The photo is used solely for the processing required to generate an AI-enhanced version.

We do not share face data with third parties for their own use. Photos are stored on Clever Cloud Cellar, a cloud storage service hosted in the European Union.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, other details about your visit, and technical details that occur in conjunction with any errors you may encounter.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Personal Information

We may ask for personal information which may include one or more of the following:

  • Email address
  • Photos you take or upload through the application
  • Company name (optional)
  • OAuth provider identifier (if you sign in with Google or Apple)
  • IP address (collected automatically by our servers)
  • Push notification token (mobile app only, if you enable notifications)

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

Legal Basis for Processing

We process your personal information under the following legal bases:

  • Performance of a contract: creating and managing your account, processing AI-enhanced photos, and delivering purchased credits.
  • Consent: newsletter subscriptions and marketing communications. You may withdraw consent at any time from your account settings.
  • Legitimate interest: error monitoring and performance analytics to maintain and improve the quality of our service. We use Plausible Analytics, a cookieless and privacy-preserving solution.

Collection and Use of Information

By accessing and using photobooth AI, you are also using the Replicate service and thereby accepting the terms of use outlined at https://replicate.com/privacy. Please review these terms carefully before using the service. If you do not agree to these terms, please refrain from using the service.

We may collect personal information from you when you do any of the following on our website:

  • Use a mobile device or web browser to access our content
  • Contact us via email, social media, or on any similar technologies
  • When you mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

  • to enable you to access and use our website, associated applications, and associated social media platforms

Please be aware that we may combine information we collect about you with general information or research data we receive from other trusted sources.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. We will comply with laws applicable to us in respect of any data breach.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services.

How Long We Keep Your Personal Information

We retain your personal information only for as long as necessary to provide our services. The following retention periods apply:

  • Photos and AI-generated images: retained until you delete your account or request deletion.
  • Server and application logs: maximum 90 days on a rolling basis.
  • Purchase records and invoices: 10 years, as required by French commercial law (Art. L.123-22 Code de Commerce).
  • Account data (email, preferences, credits): retained until account deletion, after which all personal data is permanently erased.

We may retain certain data for longer if required by applicable law, regulation, or to establish, exercise, or defend legal claims.

By deleting your account, all photos, AI-generated images, and data associated with your account will be permanently deleted. You can delete your account directly from your account settings page.

You may also request deletion or a copy of your personal data by sending an email to [email protected]. We will respond within 30 days in accordance with applicable data protection law.

Event Mode — Participant Data

When Photobooth AI is used in event mode, participants (guests at an event organised by one of our clients) may have their photos processed through the platform. In this context, the event organiser acts as the Data Controller — they determine the purpose and legal basis for processing participant data — and Premier Octet acts solely as a Data Processor, operating the technical platform under the organiser's documented instructions.

If you participated in an event and wish to exercise your rights (access, erasure, portability, or objection), please contact the event organiser directly, as they are responsible for your personal data. If you are unable to reach the organiser, you may contact us at the address below and we will do our best to assist you.

Children’s Privacy

We do not aim any of our products or services directly at children under the age of 13, and we do not knowingly collect personal information about children under 13.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

  • a parent, subsidiary, or affiliate of our company
  • third party service providers for the purpose of enabling them to provide their services, for example, IT service providers, data storage, hosting and server providers, advertisers, or analytics platforms
  • our employees, contractors, and/or related entities
  • our existing or potential agents or business partners
  • sponsors or promoters of any competition, sweepstakes, or promotion we run
  • courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise, or defend our legal rights
  • third parties, including agents or sub-contractors, who assist us in providing information, products, services, or direct marketing to you third parties to collect and process data

International Transfers of Personal Information

Personal data we collect is stored and processed within the European Union. However, some of our technical sub-processors are based outside the EU. International transfers are protected by appropriate safeguards depending on the sub-processor: EU Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU-US Data Privacy Framework (DPF) where the recipient is certified. For AI photo processing performed by Replicate, Inc. (USA), the transfer relies on your explicit consent under Article 49(1)(a) GDPR. Replicate processes photos ephemerally (auto-deleted within 1 hour) and receives only the photo — no name or contact details are transmitted. By using our AI photo features, you consent to this specific transfer to the United States.

Sub-Processors

We rely on the following third-party service providers to operate our platform. Each is bound by a data processing agreement and processes personal data only on our instructions:

  • Clever Cloud (France, EU) — cloud hosting and file storage
  • Replicate, Inc. (USA) — AI image processing. Transfer based on explicit consent (Art. 49(1)(a) GDPR); photos are processed ephemerally and auto-deleted within 1 hour.
  • Brevo / Sendinblue (EU) — transactional and marketing emails
  • Stripe, Inc. (USA) — payment processing. Transfers covered by Standard Contractual Clauses.
  • Sentry (USA) — error monitoring and performance tracking. Transfers covered by Standard Contractual Clauses.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal information: the right to access the data we hold about you (Art. 15); the right to correct inaccurate data (Art. 16); the right to request erasure of your data (Art. 17); the right to restrict processing (Art. 18); the right to data portability — you can request a copy of your data in a structured, machine-readable format from your account settings page (Art. 20); and the right to object to processing based on legitimate interest (Art. 21). We will not discriminate against you for exercising any of these rights.

If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.

If you have subscribed to our newsletter, you can unsubscribe at any time from your account settings or by clicking the unsubscribe link in any email we send you.

If you believe that any information we hold about you is inaccurate, out of date, or incomplete, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate or incomplete.

If you believe that we have breached applicable data protection law and wish to make a complaint, please contact us using the details below. You also have the right to lodge a complaint directly with your national data protection authority. In France: Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr.

Use of Cookies

We use session cookies solely for authentication purposes — to keep you logged in across pages. We do not use advertising, tracking, or profiling cookies. For usage analytics, we use Plausible Analytics, a privacy-focused service that does not use cookies and does not collect any personally identifiable information.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details: [email protected]