Privacy Policy

Last updated: July 5, 2026

1. Information We Collect

We collect information you provide directly to us, such as your email address when you create an account. We also collect usage data including images you upload, API key usage, and access logs necessary to provide our service.

2. How We Use Your Information

We use the information we collect to:

3. Data Storage and Security

Your images are stored on Cloudflare R2 (international) or Alibaba Cloud OSS (China region). The international (picora.me) and China (picora.cn) deployments are fully isolated — accounts, files, and payment data are never synchronized or transferred between regions. International infrastructure spans EU, UK, US, and Asia-Pacific via Cloudflare, with cross-border transfers relying on Standard Contractual Clauses (SCCs); the China deployment stores all personal data within mainland China with no cross-border transfer (PIPL compliance). We implement industry-standard security measures including encryption in transit (HTTPS) and at rest. Passwords are hashed using bcrypt with a cost factor of 12 or higher.

4. Data Retention

We retain your data for as long as your account is active. Upon account cancellation, your images remain accessible for 30 days, after which they may be permanently deleted. You can request data export at any time through the dashboard.

5. Third-Party Services

We use the following third-party services:

6. Your Rights

You have the right to access, correct, or delete your personal data. You may also request a copy of all data we hold about you. To exercise these rights, contact us at privacy@picora.me.