Privacy Policy

Last updated: June 2026

POPWIZ is operated by CONFLUX LABS LTD, a company registered in England and Wales with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. This Privacy Policy describes how we collect, use, and protect your data when you use our AI-powered commercial photography platform and services.

1. Information We Collect

Personal Information: When you create an account, subscribe to our service, or contact us, we may collect your username, email address, company or brand name, and billing information.

Uploaded Content: Images and other media files you upload to our platform for AI processing.

Usage Data: Information about how you interact with our platform, including pages visited, features used, generation history, and timestamps.

Technical Data: IP address, browser type and version, device information, and operating system.

2. How We Use Your Data

We use your information to: provide and maintain our AI photography platform and bespoke generation services; process your subscriptions and payments; communicate with you about your account and service updates; improve and optimise our platform and AI models; comply with legal obligations.

3. AI Processing

Images you upload are processed by our systems and service providers solely to deliver the service you have requested. We share your proprietary brand imagery only with the service providers necessary to deliver the service (see Section 4), not with other users, and we do not sell it to third parties. We do not use your uploaded content to train shared models without your explicit consent.

4. Third-Party Services

We do not sell your personal data. We share information only with the following categories of service providers who assist us in operating our platform:

  • Payment Processing: Stripe processes all payment transactions, supporting credit cards and WeChat Pay. Your payment card details are handled directly by Stripe and are never stored on our servers.
  • AI Services: Third-party AI providers (for image generation, video generation, and supplementary AI analysis).
  • Email Service: Resend (email verification and notifications).
  • Cloud Storage: Cloudflare R2 (image and video storage).

5. Data Retention

Transition notice

We are upgrading our data governance pipeline so the retention windows below are fully automated. During this transition, some cleanup steps rely on manual workflows, and deletion or export requests are handled by our support team after identity verification within the timeframe required by applicable law. Contact support@popwiz.ai with any questions.

  • Account profile: retained while your account is active; soft-deleted immediately after a deletion request, then hard-deleted or anonymised after a 30-day grace period except for records we must keep for legal, billing, security, or audit purposes.
  • Uploaded reference images: normally retained for 90 days from last use.
  • Generated outputs: retained while the owning project or account exists, then deleted when the project is deleted or the account is hard-deleted.
  • Chat and Agent history: normally retained for 365 days from last activity, or deleted/redacted with the project or account.
  • Logs, metrics, IP, and device metadata: normally retained for 90 days unless needed for an active security, billing, fraud, support, or legal matter.
  • Payment, tax, audit, and data-request records: retained as needed for legal, tax, dispute, and audit purposes; payment/tax and audit records are normally kept for up to 7 years, and data-request records for 3 years after closure.

You may request export or deletion of your data at any time. We delete database records and Cloudflare R2 objects that POPWIZ controls; for AI, payment, email, and infrastructure providers that retain caches, logs, or accounting records, we request deletion when provider tooling is available and disclose limits we cannot directly control.

6. Data Security

We implement industry-standard technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.

7. Your Rights

Under applicable data protection laws, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; object to or restrict processing; data portability in a structured, commonly used format; withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at support@popwiz.ai. We will verify your identity and respond within the timeframe required by applicable law.

8. Cookies

We use essential cookies required for the platform to function correctly, and analytics cookies to understand how our service is used. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the effective date.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: support@popwiz.ai