Privacy Policy

Last updated: April 2026

POPWIZ is operated by CONFLUX LABS LTD, a company registered in England and Wales with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. This Privacy Policy describes how we collect, use, and protect your data when you use our AI-powered commercial photography platform and services.

1. Information We Collect

Personal Information: When you create an account, subscribe to our service, or contact us, we may collect your username, email address, company or brand name, and billing information.

Uploaded Content: Images and other media files you upload to our platform for AI processing.

Usage Data: Information about how you interact with our platform, including pages visited, features used, generation history, and timestamps.

Technical Data: IP address, browser type and version, device information, and operating system.

2. How We Use Your Data

We use your information to: provide and maintain our AI photography platform and bespoke generation services; process your subscriptions and payments; communicate with you about your account and service updates; improve and optimise our platform and AI models; comply with legal obligations.

3. AI Processing

Images you upload are processed by our AI models solely to deliver the service you have requested. Your proprietary brand imagery is not shared with other users or third parties. We do not use your uploaded content to train shared models without your explicit consent.

4. Third-Party Services

We do not sell your personal data. We share information only with the following categories of service providers who assist us in operating our platform:

  • Payment Processing: Stripe processes all payment transactions, supporting credit cards, Alipay, and WeChat Pay. Your payment card details are handled directly by Stripe and are never stored on our servers.
  • AI Services: Google Gemini / Vertex AI (image generation), Kling AI (video generation), DeepSeek / OpenRouter (supplementary AI analysis).
  • Email Service: Resend (email verification and notifications).
  • Cloud Storage: Cloudflare R2 (image and video storage).

5. Data Retention

  • Generated output files: automatically deleted after 7 days
  • Session-uploaded images: automatically deleted within 30 minutes after processing
  • Service logs: retained for 180 days
  • Usage and payment records: retained indefinitely for billing audit purposes

You may request deletion of your data at any time.

6. Data Security

We implement industry-standard technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.

7. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; object to or restrict processing of your data; data portability — receive your data in a structured, commonly used format; withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookies

We use essential cookies required for the platform to function correctly, and analytics cookies to understand how our service is used. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the effective date.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: [email protected]