Privacy Policy

VITRINA is committed to handling your data with care and transparency. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We process personal data lawfully and in accordance with applicable data protection law, including the GDPR for users in the European Economic Area.

Account information: your email address and name (or the Google account details you authorize when signing in with Google).

Uploaded content: product photos and text descriptions you submit for generation. These are stored in Supabase Storage and are associated with your account.

Usage and billing metadata: which features you use, generation job records (category, scene, tier, credit deductions, fidelity scores), and billing information processed by Polar (we never see or store card numbers — payment details are collected by Polar as merchant of record).

We use your information to: operate and deliver the service (run the generation pipeline, store results, process payments); communicate with you about your account, billing, or support requests; and improve service reliability and performance over time.

We never use your uploaded photos or generated images to train AI models — our own or anyone else's. Your product images are processed only to produce the results you requested.

We never sell your personal data or content to any third party. We do not share your data for advertising purposes.

To operate VITRINA, we share data with trusted third-party processors acting on our instructions:

Supabase — authentication, database, and file storage. Polar — merchant of record: payment processing, subscription management, invoicing, and tax. fal.ai — managed AI model API gateway (your images are sent here to run the generation model). Vercel — application hosting and edge delivery. Each provider is bound by its own data processing terms.

A full, current list of subprocessors is published at /legal/subprocessors. Business customers can request our Data Processing Agreement (DPA) by emailing hello@anmflow.com.

We retain your account data and generated images for as long as your account is active. Source upload files are removed after a short processing window once results are delivered, unless you explicitly store them. You can request deletion at any time (see Your rights).

Under the GDPR you have the right to access, rectify, export (portability), restrict, object to, and erase the personal data we hold about you. You can exercise the main ones yourself: Dashboard → Settings → Privacy & data lets you download a full export of your data and permanently delete your account. You can also email hello@anmflow.com with the subject "Data request".

You also have the right to lodge a complaint with a supervisory authority. VITRINA is established in Latvia; the competent authority is the Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv), and you may also complain to the authority in your own EU/EEA country. We respond to data requests within 30 days.

We use essential cookies for authentication sessions and preferences (such as your chosen theme and language). We do not place third-party advertising cookies. If we add analytics in the future, we will update this policy and offer opt-out controls.

VITRINA is a global service. Your data may be processed in the United States and other countries where our service providers operate. Where required by law, we rely on standard contractual clauses or other approved transfer mechanisms to protect your data.

For privacy questions, data requests, or to report a concern, email us at hello@anmflow.com. We aim to respond within one business day.