Privacy Policy

AI Royal Portrait (“the Service”) is provided by BookAI Studio, a DBA of BrightSpan Holdings LLC. References in this policy to “we”, “us”, or “our” mean BookAI Studio and, where applicable, its parent BrightSpan Holdings LLC.

We collect the following categories of information:

• Account data: email address, name (optional), password hash, and profile image URL when you create an account.
• Content: photos and prompts you upload, and the generated outputs we produce for you.
• Payment data: handled by Stripe; we never see your full card number. We store the Stripe customer/session IDs needed to reconcile your purchases and credit balance.
• Usage data: basic request metadata (timestamps, endpoint, status) needed to operate and protect the Service.
• Device & log data: IP address, user agent, and similar technical information, retained for security and abuse prevention.

We use the information we collect to:

• Operate, maintain, and improve the Service.
• Authenticate you and protect your account.
• Process credit purchases and apply credits to your account.
• Respond to support requests and send transactional emails.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal information. We do not use your uploaded photos or prompts to train third-party AI models.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

• Contract: to provide the Service you signed up for and to process your credit purchases.
• Legitimate interests: to secure the Service, prevent fraud, and improve features.
• Consent: where we ask for explicit consent (e.g. optional marketing emails). You can withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, and law-enforcement requests.

We use first-party cookies and similar local-storage mechanisms only to keep you signed in and to remember your preferences. We do not use third-party advertising cookies. Stripe may set cookies on checkout pages to prevent fraud.

We share information only with:

• Stripe— to process payments.
• Hosting and infrastructure providers— to run the Service (Postgres database, file storage, and the AI model provider we route your try-on request to).
• Email providers— to send transactional messages like purchase receipts.
• Law enforcement— when we believe in good faith that disclosure is necessary to comply with a law, regulation, or valid legal process.

We do not sell or rent your personal information to third parties for marketing purposes.

We keep your account data for as long as your account is active. Generated try-on history is kept until you delete it or close your account. Backups are retained for up to 90 days. You can request deletion of your account at any time by emailing admin@bookaistudio.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, email admin@bookaistudio. We will respond within 30 days.

EEA, UK, and Swiss residents also have the right to lodge a complaint with their local data-protection authority.

We are based in the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms for cross-border transfers.

The Service is not directed to children under 13 (or older where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We use commercially reasonable safeguards to protect your information, including HTTPS in transit, hashed passwords (bcrypt), and access controls. No system is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will post a notice on the Service or email you. Continued use after the effective date constitutes acceptance.

Questions about this Privacy Policy can be sent to admin@bookaistudio.