Privacy at Chelfy

• Your email address, chosen display name and login details (to secure your account).
• Your shop name and any optional shop profile details you add.
• Your product source photos, Studio directions, generated photos and saved Review decisions (to provide Studio and restore your work when you return).
• Room views you save as custom Studios, and source portraits, generated poses and permission records you provide when creating a custom Model. These may contain a person’s likeness, so upload them only with that person’s permission.
• Future-feature requests you explicitly record, such as a Shopify catalogue-import request (to measure demand and decide what to build next).
• Usage telemetry, such as pages visited and features used, only when you accept analytics cookies.
• Subscription and billing records. Stripe handles card details; we never see your card number.

• We never train shared models on your Studio content. Your source photos, directions and finished photos stay yours.
• We never sell your data to third parties.
• We never share your customer or sales data with other merchants.
• A Shopify feature request does not connect your store or import catalogue, customer or sales data.

If you use the free Studio intro on our website or ask for updates, you are not a customer yet, so this part is separate from the account sections above. Here is exactly what happens to your data.

What we collect

• Your email address, so we can send your one-time code, your finished photo, and (only if you ask us to) relevant Studio or requested-feature updates. We also keep a tidied-up version of it so the free-photo limit stays fair.
• The product photo you upload, and the finished photo we make from it. For free photo creation, upload product photos only. The separate on-device Model planning view may preview portrait files locally; it states before any registered-account upload is made.
• A one-time verification code, kept in a scrambled form we cannot read back, never as plain text.
• Your rough location (country, region, town), worked out from your internet (IP) address, plus the IP address itself for a short while, to keep the demo fair and stop abuse.
• A few optional details, only if you choose to share them: your shop name, Instagram, website, town, and whether you are on Shopify.
• Basic technical information your browser sends, such as your browser type. If you join as a shop, we also make a quick check of the public Companies House register to understand who is signing up.

Why we are allowed to use it

• To run the free intro, verify your email, and (if you subscribe) take payment: because you asked us to, as the first steps of a possible agreement.
• To keep the free intro fair, tell humans from bots and stop abuse: our legitimate interest in a service that works and is not gamed.
• To email you about Studio or a future feature you requested: only with your consent. We send at most one of these a week, and every one has a one-click unsubscribe.
• To measure how the site is used: only if you accept analytics cookies. Until you do, we send no analytics.

Who helps us run it

We use a small number of trusted suppliers, and they only ever act on our instructions, under a contract that holds them to the same standards we hold ourselves: to send our emails, to tell humans and bots apart on our forms, to take subscription payment (we never see or store your card number), and to create your finished photo and, if you allow it, measure how the site is used. Some are based outside the UK. Where that happens, we put appropriate safeguards in place so your data stays protected to UK standards.

How long we keep it

Unclaimed free-Studio uploads and finished photos, and your full IP address, are deleted within 30 days. Photos moved into a registered Studio are kept with that account until you delete it. If you asked for updates, we keep your email and the details you shared until you unsubscribe or ask us to delete them, so we can send the updates you asked for. We keep only a rough, non-identifying record of where sign-ups came from, for our own analytics.

Your choices

You can ask us for a copy of your data, correct it, delete it, take it elsewhere, object to how we use it, or withdraw your consent, at any time, by emailing privacy@chelfy.com. Withdrawing consent does not undo anything we did lawfully before you withdrew it. If you think we have got this wrong, you can also complain to the Information Commissioner’s Office (ico.org.uk).