Privacy Policy

Last updated: Jul 19, 2026

1. Who we are

PhotoCAD is operated by Francis Field, trading as PhotoCAD, c/o St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom (“PhotoCAD”, “we”). PhotoCAD is the data controller for the personal information described in this policy. Contact: support@photocad.ai.

1a. Information we collect

When you use PhotoCAD, we collect information you provide directly — your email address when you create an account, and the images you upload for conversion. We also collect standard usage data (pages visited, features used, device type) through our analytics provider.

2. How we use your information

We use your information to:

• Provide the photo-to-vector conversion service
• Manage your account and credit balance
• Send transactional emails (account confirmation, purchase receipts)
• Send product updates and our newsletter, which you can opt out of at any time
• Improve the service through aggregated, anonymized usage analytics

Product updates and newsletters are marketing communications, separate from transactional emails. We send them only where we are permitted to, and every marketing email includes a one-click unsubscribe link. Opting out stops marketing emails without affecting the transactional emails needed to run your account.

Our lawful bases under UK GDPR: performing our contract with you (providing the service, processing your images, billing); our legitimate interests (service security, abuse prevention, improving the service); your consent (marketing emails, which you can withdraw at any time); and legal obligation (tax and accounting records).

3. Image handling

Images you upload are sent to our AI processing pipeline to generate vector conversions. Your uploaded images and conversion results are stored in your private account and are not shared with other users or made public. We do not use your uploaded images to train AI models.

4. Gallery content

Images in the public gallery are curated by PhotoCAD from licensed stock photography and Creative Commons sources. They are not derived from user uploads.

5. Third-party services

We use third-party services to operate PhotoCAD. These include Supabase, Stripe and Vercel, and the cloud AI infrastructure our conversion pipeline runs on, among others. Each provider has their own privacy policy governing how they handle data.

5a. International transfers

Our infrastructure is hosted in the United States, and our AI processing providers are US-based — so your data, including uploaded images, is transferred to and stored in the US. These transfers are safeguarded by our providers’ data processing agreements incorporating the applicable standard contractual clauses and the UK International Data Transfer Addendum. Details of who processes what are on our Trust & Data Security page.

6. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Vercel Analytics) to understand how the service is used. We do not use advertising cookies or sell data to advertisers.

7. Data retention

Your account data is retained for as long as your account is active. Conversion history is retained until you delete it — and when you delete a conversion, its image content is permanently destroyed within 30 days. On Stealth accounts, content is destroyed on the account’s retention schedule (30 days after creation by default, 48 hours after deletion) as described in the Stealth Terms. You can delete your account and all associated data at any time from your dashboard. Gallery content is retained indefinitely as part of the public site.

8. Your rights

Under UK GDPR you have the right to access, correct, delete, and receive a portable copy of your personal data, to restrict or object to its processing, and to withdraw consent where processing is based on consent. You can delete your account — and everything associated with it — at any time from your dashboard. To exercise any other right, contact privacy@photocad.ai. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

9. Business transfers

If the PhotoCAD business is transferred to a successor entity that carries on the business (including a company formed to incorporate it), your personal data may transfer with it under the same protections; we will notify you of any such transfer.

10. Changes to this policy

If we materially change this policy, we will give you at least 30 days’ notice by email, consistent with the change-notice promise on our Trust & Data Security page.

For privacy-related inquiries — contact us at privacy@photocad.ai