Privacy Policy

Who is responsible

[Your full legal name], trading as ShelfShot, is the data controller. Contact: [your contact email].

Your photos

• Free tool: on most modern browsers your photo is processed entirely on your own device and is never uploaded to us.
• Cloud backup: if your browser can't run the AI model, your photo is sent securely to our image processor (fal.ai) to cut out the background, and the result is sent straight back to you. We don't keep it.
• Scene pack: to create lifestyle scenes we send your product cut-out and the text you entered to fal.ai, which returns the images. Generated images are stored by fal.ai for a limited time so you can download them. We don't keep a copy.
• Your cut-out and pack details are saved in your own browser (IndexedDB) so your pack page works after checkout. You can clear them by clearing your browser's site data.

Payments

Paddle.com is our reseller and Merchant of Record. Paddle collects your name, email, payment and tax details and acts as an independent controller for that data under its privacy notice. We receive your order details (such as email, country and order number) so we can deliver your pack and provide support.

Other data

• To prevent abuse we store a one-way hashed (scrambled) version of your IP address with a counter for about a day. We can't turn it back into your IP address.
• Our website is hosted by Cloudflare, which processes standard technical data (such as IP address) to deliver and protect the site.
• We don't use advertising cookies or tracking cookies.

Why we use data (lawful bases)

To provide what you ask for (contract), and to keep the service secure and prevent abuse (legitimate interests).

Your rights

Under UK GDPR you can ask to access, correct or delete your personal data, or object to its use. Email us. You can also complain to the Information Commissioner's Office (ico.org.uk).

Processors and transfers

We use Cloudflare (hosting), fal.ai (image processing) and Paddle (payments). Some are based outside the UK; they protect data with standard contractual safeguards.