The short version
- We collect what is needed to run your account and workspace: your details, your uploads and how you use the Service.
- Your photos are sent to an AI provider (Google Gemini) only to generate your images. We do not train our own models on them.
- We do not sell your data, and we do not use advertising cookies.
- You can access, correct, export or delete your information by emailing us.
01Who we are
This Privacy Policy explains how OnFoot ("we", "us") collects and uses personal information when you visit our website, sign up, or use the OnFoot studio (the "Service").
For account and website information, OnFoot decides how the information is used (we are the "controller"). For content that a business customer uploads to its workspace, that customer is in control, and we process it on their instructions (we are a "processor"). Business customers who need a data processing agreement can ask for one at hello@onfootai.com.
02What we collect
| Type | Examples | Where it comes from |
|---|---|---|
| Account details | Name, work email, company, team, catalogue size, preferred sales channels, password (stored only in hashed form by our sign-in provider) | You, when you sign up |
| Workspace content | Product photos, reference photos, brand presets, notes, generated images, accuracy scores | You and your teammates |
| Usage information | Credits used, features used, generation history, errors | The Service, automatically |
| Device and log data | IP address, browser type, device type, pages visited, dates and times | Your browser, automatically |
| Billing details | Billing contact and plan. Card details go directly to our payment processor and are not stored by us | You, if you buy a paid plan |
| Communications | Emails and support requests | You |
We do not intentionally collect sensitive information, such as health or biometric data. Please do not upload photos of identifiable people unless you have their consent. We do not use reference photos to identify anyone.
03How we use it
- To run the Service: create your account and workspace, generate and score images, export files and keep your history.
- To keep it safe: prevent fraud and abuse, enforce usage limits, and investigate security issues.
- To support you: answer questions and send service messages such as receipts, security alerts and changes to our terms.
- To improve it: understand which features are used, using usage information and aggregated data. We do not use your workspace content to train our own AI models.
- To tell you about OnFoot: product news, if you have not opted out. Every marketing email has an unsubscribe link.
- To meet legal obligations, such as tax records and responding to lawful requests.
Where privacy law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and improving a secure service, your consent (for example, for optional cookies), and legal obligations.
04How AI processing works
To create images, the Service sends your product photos, reference photos and brief to a third-party AI model provider. Today this is Google, through the Gemini API. The provider processes the content to return a result to us, under its terms for business API customers.
Requests go through our own server so that API keys are never exposed in your browser. Generated images are returned to your workspace. Images may carry markers that identify them as AI-generated.
07How long we keep it
- Account details: for as long as your account is open, and up to 30 days after it closes.
- Workspace content: until you or your admin deletes it, or 30 days after the workspace is closed.
- Logs and security records: up to 12 months.
- Billing records: as long as tax and accounting law requires, usually up to 7 years.
Backups are overwritten on a rolling basis, so deleted data may remain in backups for a short time before it is removed.
08Security
We protect information with encryption in transit (HTTPS), access controls by workspace role, keeping API keys on the server rather than in the browser, and limiting staff access to what is needed. No method of storage or transmission is completely secure, but we work to protect your information and will notify you and the authorities where required if a breach affects it.
09Your choices and rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy;
- correct information that is wrong;
- delete your information;
- object to or restrict certain uses, and withdraw consent you have given;
- take your information to another service (portability);
- opt out of marketing emails at any time.
To use these rights, email hello@onfootai.com from the address on your account. We will respond within the time the law requires, usually 30 days for most requests and up to 45 days for California residents. We will not treat you differently for using your rights. You may also complain to your local data protection authority.
If your account is part of a business workspace, we may refer requests about workspace content to that business.
US state privacy rights
Residents of California, Texas, Colorado, Virginia and other states with privacy laws have the rights above, subject to the limits in those laws. You can use an authorised agent to make a request. You can appeal a decision we make on a request by replying to our response.
10International transfers
OnFoot is based in the United States, and our providers may process information in the United States and other countries. Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we use safeguards recognised by law, such as standard contractual clauses.
11Children
The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect information from children. If you think a child has given us information, contact hello@onfootai.com and we will delete it.
12Changes to this policy
We will update this Policy when our practices change. If a change is material, we will tell you by email or in the Service before it takes effect. The date at the top shows when it was last updated.
13Contact
Questions or requests about privacy: hello@onfootai.com.
This summary and the headings are for convenience. The full text of each section is what applies. See also our Terms of Service.