Privacy policy

Last updated 15 October 2026

1. 1. Who is responsible

   The controller of your personal data is BuildAndBuild OÜ, Sepapaja tn 6, 11415 Tallinn, Estonia, registry code 17378955. For any privacy question or request, email contact@getmodels.ai.

2. 2. What we collect

   • Account data: your email address, name and sign-in details. Passwords are stored only as a secure hash.
   • Your content: garment photos and product links you upload, the campaign settings you choose, and the images we generate for you.
   • Billing data: your membership status, plan size, credit balance and purchase history. Card details are handled by Stripe and never reach our servers.
   • Messages: what you send us through the contact form or by email (name, email, company and message).
   • Technical data: IP address, browser type and request logs, which our hosting providers record to run and secure the service.

3. 3. Why we use it

   • To provide the service you signed up for: your account, generating images, credits and billing (contract, Art. 6(1)(b) GDPR).
   • To keep the service secure and prevent abuse and spam (legitimate interest, Art. 6(1)(f)).
   • To answer your messages (legitimate interest, or steps before a contract).
   • To meet legal obligations, such as keeping accounting records (Art. 6(1)(c)).

4. 4. AI processing

   To create your images, we send your garment photos and campaign settings to our AI provider, Google (Gemini API). We use the paid API, under which Google doesn't use your content to train its models.

   We don't use your uploads or generated images to train AI models, and we don't sell your data. The models in generated images are synthetic and aren't based on any real person's data.

5. 5. Who we share it with

   We only share data with providers we need to run the service, under data processing agreements:

   • Supabase: database, sign-in and file storage, hosted in the EU (Ireland).
   • Cloudflare: website hosting, security, and forwarding of emails sent to our address.
   • Google: AI image generation (Gemini API).
   • Stripe: payments and invoicing.
   • Resend: sending emails, such as contact form messages.

   We may also disclose data where the law requires it.

6. 6. International transfers

   Some of these providers process data outside the European Economic Area, mainly in the United States. In those cases the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

7. 7. How long we keep it

   • Account data, uploads and generated images: for as long as you have an account.
   • After you ask us to delete your account: we delete your data within 30 days.
   • Invoices and payment records: 7 years, as required by Estonian accounting law.
   • Contact messages: up to 2 years after our last exchange.
   • Server logs: for a short period, usually a few weeks.

8. 8. Cookies and local storage

   We only use what's needed to keep you signed in and remember basic preferences. We don't use advertising or analytics cookies, so we don't show a cookie banner. If that changes, we'll ask for your consent first.

9. 9. Your rights

   Under the GDPR you can ask us to:

   • give you a copy of your data, or send it to another service;
   • correct data that's wrong;
   • delete your data or your whole account;
   • restrict or object to how we use it.

   Email contact@getmodels.ai and we'll reply within one month. You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or the data protection authority in your country.

10. 10. Children

    The service isn't meant for anyone under 18, and we don't knowingly collect data from children.

11. 11. Changes to this policy

    If we change this policy in a way that matters, we'll let you know by email or in the app before the change takes effect.