NeuroShotNeuroShotBack

Privacy Policy

1. Controller

Kay Maik Fotografie
Kay Maikowske
Tönisberger Str. 33, 47509 Rheurdt
E-Mail: info@kaymaikfotografie.de
Telefon: +49 176 42939687

2. Collected Data

When using NeuroShot, we collect the following data:

  • Account Data: Email address, name (optional), company name (optional), postal address – street, ZIP, city (optional, e.g. for invoicing)
  • Usage Data: Generated images, uploaded reference images, prompts
  • Technical Data: IP address, browser type, access times (via hosting provider)
  • Payment Data: Processed directly by Stripe, we do not store credit card data
  • Communication & moderation data: The content of your support requests and – when reporting illegal content – the report data including a copy (snapshot) of the reported content (Art. 6(1)(c) and (f) GDPR in conjunction with Art. 16/17 DSA).

3. Purpose of Processing

  • Provision and improvement of the service (Art. 6 Para. 1 lit. b GDPR)
  • Account management and authentication
  • Billing of credits and payments
  • Technical security and fraud prevention

4. Third Parties & Data Processing

We use the following services to provide our services:

  • Supabase (EU): Database, Authentication – Server location: EU
  • Cloudflare R2: Image storage (Cloudflare) – stored exclusively in EU data centers.
  • Google Cloud / Vertex AI: AI image generation in EU data centers. Prompts and uploaded reference images are processed for generation; no use for training purposes.
  • Firebase Hosting: Web hosting – Google LLC, USA (third country; safeguarded by the EU-US Data Privacy Framework).
  • Email delivery (SMTP): Sending support and confirmation emails (e.g. confirmation of cancellation receipt).

5. Storage & Cookies

We use cookies to improve user-friendliness and collect statistical data on the use of our service. You can revoke your consent at any time via the cookie banner or your browser settings.

6. Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited. The legal basis is your consent (Art. 6 Para. 1 lit. a GDPR).

  • Data Transfer: Google also processes data for website usage in the USA.
  • IP Anonymization: Your IP address is truncated by Google within the EU/EEA before transmission.
  • Revocation: You can prevent collection by Google Analytics by disabling cookies in your browser or installing the browser add-on to disable Google Analytics.

7. Meta Pixel (Facebook)

This website uses the Meta Pixel, an analysis tool of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). The legal basis is your consent (Art. 6 Para. 1 lit. a GDPR).

  • Purpose: Analysis of the effectiveness of advertising measures and optimization of the user experience.
  • Collected Data: Page views, interactions (e.g., registrations, purchases), device information.
  • Data Transfer: Data may also be processed in the USA. Meta has joined the EU-US Data Privacy Framework.
  • Revocation: You can revoke your consent at any time via the cookie banner or your Facebook Ad Settings.

More information: Meta Privacy Policy

8. Storage Duration

In line with the principle of storage limitation (Art. 5(1)(e) GDPR), we store your data only as long as necessary. As long as you actively use your account, your data and generated images are retained. If an account remains inactive for 12 months (no login and no image generation; for customers with prior purchases: 24 months), we announce the deletion at least 30 days in advance by email and then irrevocably delete the account including all generated images, unless you become active again within this period. Active, ongoing subscriptions are exempt from automatic deletion. Before any deletion you can export your data (Art. 15/20 GDPR). Upon account deletion – whether by you or due to inactivity – all personal data including images is irrevocably removed. To prevent abuse (e.g. repeatedly claiming free starter credits), afterwards we retain only a non-reversible cryptographic hash of your email address; your plaintext data cannot be reconstructed from it (Art. 6(1)(f) GDPR, legitimate interest in fraud prevention).

9. Your Rights (GDPR)

You have the following rights:

  • Access (Art. 15): What data we store about you
  • Rectification (Art. 16): Correction of incorrect data
  • Deletion (Art. 17): Complete account deletion via profile settings
  • Restriction (Art. 18): Restriction of processing
  • Data Portability (Art. 20): Export of your data
  • Objection (Art. 21): Objection to specific processing
  • Complaint: With the competent supervisory authority – for us: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2-4, 40213 Düsseldorf, Germany.

10. Contact for Privacy Inquiries

Kay Maikowske
E-Mail: info@kaymaikfotografie.de

Last updated: June 2026