Privacy Policy
Effective date: 1 September 2026
This policy explains what Lens Your Car does with your data. We have tried to write it in plain language rather than in the usual fog.
Data controller: YAN YI Contact: support@lensyour.com
1. The short version
- We collect your email, your uploaded photographs, and a record of what you generated
- Your photographs go to a third-party AI provider so we can generate images. That is the whole point of the service
- We do not use your photographs to train models, and we do not sell your data
- We never see your card details — Paddle handles payment
- Images are deleted after 90 days
- You can delete your account and everything in it, at any time, yourself
2. What we collect
2.1 When you create an account
| Data | Why |
|---|---|
| Email address | Identifies your account, sends verification and receipts |
| Password (hashed with Argon2id) | Authentication. We cannot read your password |
| Display name | Shown in the interface |
| Account creation and update timestamps | Support and abuse investigation |
2.2 When you sign in
| Data | Why |
|---|---|
| IP address | Rate limiting, detecting account compromise |
| Browser user agent | Same, plus showing you your active sessions |
| Session tokens | Keeping you signed in |
We keep session records so you can see where your account is signed in and revoke sessions you do not recognise.
2.3 When you generate images
| Data | Why |
|---|---|
| Photographs you upload | Generating your images |
| Generated images | Delivering results and your history |
| Generation parameters (scene, adjustments) | Producing the result, and your history |
| Credit ledger entries | Accurate billing and refunds |
We strip EXIF metadata, including GPS location, from every uploaded image before processing or storing it.
2.4 When you buy credits
Payment is processed by Paddle. We never receive your card number, CVV, or billing address.
We store: which pack you bought, when, how much you paid, Paddle's transaction reference, and the credits granted. We need this for refunds, tax records, and your purchase history.
2.5 When you subscribe to our newsletter
We store your email address, when you confirmed, and the IP address you confirmed from. That last one is a legal record proving you opted in — required under GDPR.
Newsletter subscription is entirely separate from having an account. Creating an account does not subscribe you.
3. Why we are allowed to process it (GDPR legal bases)
If you are in the EU, UK, or another GDPR jurisdiction:
| Purpose | Legal basis |
|---|---|
| Running your account, generating your images | Contract (Art. 6(1)(b)) |
| Sending verification, password reset, receipts | Contract (Art. 6(1)(b)) |
| Rate limiting, fraud and abuse prevention, security | Legitimate interests (Art. 6(1)(f)) |
| Keeping payment and tax records | Legal obligation (Art. 6(1)(c)) |
| Marketing newsletter | Consent (Art. 6(1)(a)) — withdrawable any time |
We have assessed our legitimate interests against your rights. Rate limiting and abuse prevention use the minimum data needed and are not used to profile you.
4. Who we share it with
We use these processors. Each receives only what it needs.
| Provider | What it receives | Where | Purpose |
|---|---|---|---|
| Tencent Cloud | Everything we store, including your photographs | Hong Kong SAR | Servers, database, image storage, image generation |
| Paddle.com Market Ltd | Email, purchase data | UK / EU | Payments, Merchant of Record |
| Resend | Email address, message content | US / EU | Account emails (verification, receipts) |
| Brevo | Email address, subscription status | EU (France) | Newsletter only |
We do not sell your data. We do not share it with advertisers. We do not run third-party analytics or advertising trackers.
We may disclose data if legally required to, or to protect our rights or someone's safety. If we receive a legal demand for your data, we will tell you unless we are legally prohibited from doing so.
4.1 About image generation
Your photographs are not sent to any third-party AI service.
We built and run our own image models on our own infrastructure. Your photograph goes from your browser to our servers, gets processed there, and the result comes back. No outside company sees it, and no outside company can train on it.
This is a deliberate choice. Most tools in this category forward your images to a third-party model API, which puts your photograph under someone else's terms. We did not want that, so we did the harder thing.
If this ever changes — if we add a third-party model for some feature — we will name that provider in the table above and update this policy before any of your images reach them.
5. International transfers
Our servers are in Hong Kong SAR. Our AI, email, and payment providers operate in other countries, which may include the United States and the European Union.
If you are in the EEA or UK, this means your data is transferred outside your region. We rely on Standard Contractual Clauses or equivalent safeguards with each provider.
6. How long we keep it
| Data | Retention |
|---|---|
| Uploaded photographs | 90 days, then automatically deleted |
| Generated images | 90 days, then automatically deleted |
| Generation history records | 90 days |
| Account data (email, password hash) | Until you delete your account |
| Credit ledger | Until you delete your account |
| Payment records | 7 years — required by tax law, kept after account deletion |
| Session records | 30 days after expiry |
| Newsletter subscription | Until you unsubscribe, plus 3 years for the consent record |
Payment records are the one thing that survives account deletion. Tax law requires it. They are reduced to the minimum: transaction reference, amount, date.
7. Your rights
Under GDPR and similar laws, you have the right to:
- Access — get a copy of your data
- Rectification — correct what is wrong
- Erasure — have your data deleted
- Portability — receive your data in a machine-readable format
- Restriction — have us pause processing while a dispute is resolved
- Object — object to processing based on legitimate interests
- Withdraw consent — unsubscribe at any time, without affecting past processing
Most of these you can do yourself, immediately, from your account settings — export your data, delete your account, unsubscribe. We would rather give you the button than make you write us an email.
For anything else, email support@lensyour.com. We respond within 30 days, usually much faster.
If you are unhappy with our response, you have the right to complain to your local data protection authority.
8. Cookies
We use the minimum necessary:
| Cookie | Purpose | Duration |
|---|---|---|
| Refresh token | Keeps you signed in | 30 days |
| CSRF token | Prevents cross-site request forgery | Session |
These are strictly necessary cookies. We do not use advertising or analytics cookies, so we do not show you a cookie banner — there is nothing for you to consent to.
If we ever add analytics, we will ask first.
9. Security
- Passwords hashed with Argon2id — we cannot recover or read them
- All traffic over HTTPS
- Refresh tokens are rotated on use, and reuse of an old token revokes the entire session family — meaning a stolen token gets caught
- Access to production data is limited to the operator
- Uploaded images stripped of metadata before storage
No system is perfectly secure. If we discover a breach affecting your personal data, we will notify affected users and the relevant supervisory authority within 72 hours, as GDPR requires.
10. Children
Lens Your Car is not for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.
11. Automated decision-making
Image generation is automated, but it does not produce legal or similarly significant effects about you, so GDPR Art. 22 does not apply.
We use automated rate limiting and abuse detection that can temporarily restrict an account. If your account is restricted, you can request human review by emailing us.
12. Changes
We may update this policy. For material changes we will email registered users at least 14 days in advance. The effective date at the top always reflects the current version.
13. Contact
YAN YI Email: support@lensyour.com