Privacy Policy

1. Controller and contact

The data controller is Sylwia Wojtala, trading as Sylwia Wojtala Art. For personal data matters, contact us at [email protected].

2. Data we process

We process your email address, optional profile details (name and studio name), technical session data, credit history, and uploaded photos, projects and generated stencils.

3. Purpose and legal basis

The data is needed to create and secure your account, carry out generation, manage credits, communicate with you and handle bug reports. Processing takes place in connection with providing the service and — where the terms have been accepted — on the basis that it is necessary to perform that service.

4. Technical service providers

To run the application, we use hosting and database services, file storage, transactional email and AI infrastructure. Uploaded images may be sent to RunPod solely to carry out generation.

5. Retention period

We retain account data until the account is deleted or the beta period ends, unless the law requires a longer retention period. Project files are deleted when the user deletes the project. Data may be retained for a shorter or longer period where necessary for security, accounting or handling claims.

6. Your rights

You may request access to your data, rectification, erasure, restriction of processing or portability, or object to processing — depending on the legal basis for processing. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

7. Security

Passwords are stored as cryptographic hashes. We use email verification, login attempt limits, expiring password reset links and the option to sign out of other devices.

8. Cookies

We use an essential session cookie to keep you signed in and secure your account. We do not use it for advertising or profiling.

When you manually choose a language, we store your preference in the smartcontour_locale cookie for up to one year and in browser storage. If you visit the smartcontour.app homepage without a saved preference, we choose the language using the country identified by Cloudflare from your IP address. This mechanism is not used for advertising or profiling.

9. Closed beta applications

The application form collects your first name, email address and an optional description of your experience and device. We use this data to assess your application and contact you about the beta, not for a newsletter. Applying does not create an account or guarantee an invitation. You can withdraw your application or request deletion of your data by emailing [email protected]. We retain applications for the duration of beta recruitment; once recruitment ends, we delete them from the active database. Deleted data may remain for the backup retention period.

Administrative access to projects

An authorized SmartContour administrator can view projects, uploaded images and generation history to handle reports, diagnose errors and check service quality during beta testing. This access is not a public gallery. Viewing alone does not change the project or credit balance. We do not publish users’ materials for promotional purposes without their separate consent.