PicAIby Hoff

Privacy Policy

Last updated: July 2026

Who we are

PicAI is operated by Hoff, Tangevej 10, 2740 Skovlunde. Contact: contact form

What data we collect

  • Photos you upload (used only to generate your caricature, deleted after 24 hours)
  • Email address (if you contact us)
  • Payment data (processed by Stripe — we never see your full card details)
  • Basic, anonymous usage statistics (page views — without cookies and without identifying you)

Why we collect it

  • To generate and deliver your caricature
  • To process your payment
  • To improve our service

Your rights (GDPR)

You have the right to access, correct, or delete your personal data at any time. Contact us via our contact form to exercise these rights.

Cookies

We use essential cookies only. No advertising or tracking cookies are used without your consent.

Data storage

Data is securely stored in the European Union using Neon Postgres hosted in AWS Europe (Frankfurt, Germany). Your uploaded photo is also sent to OpenAI, LLC (United States) solely to generate your caricature — see "Third parties" below for how this international transfer is safeguarded.

Generated caricature images are stored for up to 30 days after purchase, then permanently deleted. Order information is retained for 5 years in accordance with Danish bookkeeping law (bogføringsloven).

Professional portraits (photo session)

If you buy a professional photo session, you upload 6-15 photos of yourself. We use them solely as an identity reference when generating your professional portraits — never for any other purpose, never shared with other customers, and never used to train AI models.

The photos are processed by OpenAI, LLC (USA) as a data processor on the same terms described under "Third parties" and "Data storage" above, including the European Commission's Standard Contractual Clauses. Under OpenAI's API terms, API data is not used to train their models.

Your uploaded reference photos are deleted automatically 7 days after your photo session has been delivered. The generated portraits remain available in your gallery for 30 days and are then deleted automatically. Order and payment records are retained as required by Danish bookkeeping law.

You can delete your data immediately at any time using the "Delete my data now" button in your gallery. This permanently removes both your uploaded photos and all generated images, and cannot be undone.

You may only upload photos of yourself, or photos you hold the rights to and have consent from the people depicted to use.

Third parties

We use Stripe for payment processing (their privacy policy: stripe.com/privacy), OpenAI for image generation (their privacy policy: openai.com/privacy), Resend for sending order and account emails (their privacy policy: resend.com/legal/privacy-policy), and CoolRunner for creating shipping labels and booking carriers for physical orders (their privacy policy: coolrunner.dk/privatlivspolitik). OpenAI is based in the United States, so using it involves transferring your photo outside the EU/EEA. This transfer is safeguarded under the European Commission's Standard Contractual Clauses (SCCs), which OpenAI has in place as part of its Data Processing Addendum, ensuring your data receives a level of protection equivalent to EU law.

Privacy Policy — PicAI