Privacy Policy

This Privacy Policy describes how Pickles Technologies ("CarShots," "we," "our," or "us") collects, uses, and shares your information when you use our websites, apps, and services (the "Service").

If you do not agree with this Policy, do not use the Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

1) Scope & Who We Are

This Policy applies to information we process about: (a) visitors to our sites, (b) users of our apps/APIs, and (c) customers and prospective customers.

2) Information We Collect

• Account & Contact Data: name, email, password hash, phone (optional), organization, roles.
• Billing Data: payment method, billing address, transaction history (processed by our payment processors; we do not store full card numbers).
• User Content: photos/images of vehicles, prompts, scene selections, edits, videos, and associated metadata (e.g., EXIF if present).
• Usage Data: logs, device identifiers, app version, timestamps, IP address, browser/OS, referral URLs, crash reports, performance data, and feature usage.
• Cookies & Similar Tech: cookies, local storage, pixels, and SDKs for authentication, preferences, analytics, and marketing.
• Support & Comms: messages, email content, surveys, and feedback.
• Third-Party Sources: if you connect third-party services (e.g., app store accounts, cloud storage), we receive the data you authorize.

3) How We Use Information

We use information to:

• Provide the Service: authenticate, process uploads, generate Outputs, deliver files, operate APIs, and maintain your account and credits.
• Improve & Secure the Service: analytics, debugging, model/scene quality improvement, abuse and fraud prevention, incident response.
• Communicate: transactional notices, updates, security alerts, and—if you opt in—marketing emails.
• Compliance: enforce Terms, respond to legal requests, and protect rights, property, and safety.
• Personalization: remember preferences, recent scenes, and device settings.
• Training/Model Improvement (Content Policy): By default, we do not use your User Content (photos, prompts, videos, Outputs) to train foundation models or create public datasets without your explicit opt-in. We may use aggregated and de-identified telemetry to improve performance and reliability.

4) Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, our legal bases include: (a) contract (providing the Service), (b) legitimate interests (improving and securing the Service, preventing abuse), (c) consent (where required, e.g., marketing cookies), and (d) legal obligation (tax, accounting, court orders).

5) Sharing & Disclosure

We share information with:

• Service Providers/Processors: cloud hosting/CDN, storage, compute, analytics, logging, crash reporting, communications, and payment processing (e.g., Stripe/Apple/Google). These parties are bound by contractual confidentiality and data processing terms.
• Business Transfers: in mergers, acquisitions, financing, or sale of assets, subject to confidentiality.
• Legal/Protection: to comply with law or protect rights, property, users, or the public.
• With Your Direction: when you integrate or export to third-party services.

We do not sell personal data. Where CPRA applies, we do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined by California law without appropriate notice/opt-out.

6) Data Retention

We retain personal data for as long as necessary to provide the Service and for legitimate business purposes (e.g., security, accounting, legal). You can request deletion (see §9). We may retain de-identified or aggregated data.

• User Content & Outputs: You can delete items from your account. We may keep backups/logs for a limited period for security and compliance.

7) Security

We maintain administrative, technical, and physical safeguards appropriate to the nature of the data (e.g., encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure.

8) Children

CarShots is not directed to children under 13 (or the minimum age of consent in your region). We do not knowingly collect personal data from children. If you believe a child provided personal data, contact us to remove it.

9) Your Rights & Choices

Depending on your location, you may have rights to:

• Access/Portability (copy of your data), Correction, Deletion, Restriction, Objection, and to Withdraw Consent where processing is based on consent.
• CPRA (California): rights to know, delete, correct, and limit use of sensitive information, and not be discriminated against for exercising rights.
• Marketing Opt-Out: unsubscribe from marketing emails via the email footer; transactional emails will still be sent.
• Cookies: manage preferences via our cookie banner or your browser/device settings. Some features rely on cookies/SDKs.

Submit requests at [email protected]. We may verify your identity before responding.

10) International Transfers

If we transfer your data internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses) as required by law.

11) User Content, Faces, Plates & Sensitive Areas

• Faces/Plates/Locations: You are responsible for obtaining any necessary permissions and complying with privacy, publicity, and location rules. Consider masking faces/plates when appropriate.
• Prohibited Content: Do not upload unlawful or infringing content, including CSAM (strictly prohibited).

12) Cookies & Tracking

We use necessary cookies for login and security, and (with consent where required) analytics/marketing cookies or SDKs. You can adjust preferences at any time via our banner or device settings. See our separate Cookie Policy if posted.

13) Do Not Track

We do not respond to Do Not Track signals. We honor legally required browser-level or platform privacy signals where applicable.

14) Third-Party Links & Services

The Service may contain links or integrations to third-party services we do not control. Their privacy practices govern their handling of your data.

15) Changes to This Policy

We may update this Policy. If changes are material, we will notify you (e.g., by email or in-product). The "Last Updated" date reflects the latest revision.

16) Contact Us