Privacy Policy

Last updated: October 9, 2026.

Who this notice covers

This notice describes how Picshik handles information for the image workspace at www.picshik.com. In this policy, “we,” “our,” and “us” refer to Picshik. Contact [email protected] for privacy questions and requests.

Information we process

• Account information: your email, account name, verification status, and the authentication records required to sign you in. Password authentication uses the account system's protected credential records; please do not send passwords to support.
• Image requests: prompts, reference images you submit, selected models and settings, generated outputs, task status, credit deductions, and failure records.
• Orders: credit package, price, currency, order and payment identifiers, payment status, credit delivery, and related customer support correspondence.
• Service and security information: access and error logs, IP information or derived risk identifiers, browser information, session identifiers, language preferences, and referral attribution where you use an invitation link.
• Support correspondence: information you choose to provide when asking for assistance, reporting abuse, or exercising privacy rights.

Why we use it

We use this information to provide your account and image requests, deliver purchased credits, handle confirmed failures and billing problems, send verification and service emails, answer support requests, prevent abuse, and meet applicable legal obligations. Where data protection law requires a lawful basis, service delivery, legitimate operational and security interests, legal obligations, or specific consent apply as appropriate. We do not treat use of the website as blanket consent to unrelated marketing or optional tracking.

Model processing and private images

Prompts and any reference material required for your selected request are sent to the configured AI service or relay. Providers may have their own processing terms. Your account's private reference images and generated images are not automatically published in a public gallery; access may still be necessary for authorized administration, support, security, and the processing of your request. Private does not mean that only your device ever processes the content.

Our current low-cost text-to-image relay uses an unencrypted HTTP connection from our server. Website HTTPS does not make that upstream connection encrypted, and network intermediaries may be able to read the transmitted prompt. Do not submit confidential material or sensitive personal information. This notice does not claim end-to-end encryption or verified no-training arrangements with upstream providers.

Payments and service providers

Waffo provides the hosted checkout. Full payment card numbers and card security codes are entered into the payment provider's checkout, not stored by Picshik. We receive the order and payment information needed to deliver and reconcile credits. Waffo's own privacy information applies to its handling of payment data.

Other services involved include our hosting infrastructure, the configured AI providers or relays, Resend for transactional email, and Cloudflare Turnstile for sign-up and sign-in verification. We share the information needed for the relevant service, and may disclose records where law, security investigations, or legitimate dispute handling require it. We do not sell your private prompts or images.

Storage, retention, and location

Reference images and outputs are stored on our application server's local disk, while account, task, credit, and order records are stored in the account database. This implementation does not use R2 or S3 for your image storage.

Records are kept while needed to operate the account and workspace, fulfill service requests, support transactions, investigate issues, meet legal duties, and maintain necessary backups. We do not currently promise automatic deletion after a fixed number of days. You may request deletion; required accounting, security, or dispute records and backups may need separate retention. Image history is not a permanent archive: download files you wish to keep.

Our hosting, email, payment, and AI services may process information outside your country or region. Data protection rules may differ between locations. Contact support for information about the services involved in your request and applicable privacy rights.

Cookies and your choices

The workspace uses session and preference storage for sign-in, language, and referral attribution. Blocking necessary storage may prevent those features from working. Any optional analytics or marketing tools must be disclosed and configured with the consent or choice mechanisms required in the relevant location before being enabled.

Your data rights

You can exercise the following rights by emailing [email protected] from your registered account email. Use the subject “Privacy / Data Request” and describe the information or action concerned. These requests are handled manually; Picshik does not currently offer a one-click account deletion or full-data export feature.

• Access and copies: sign in to Profile to view your account email and profile information, and Image History to view your recorded generation tasks. To obtain a copy of other personal information associated with your account, email support and specify the categories requested. We provide the relevant information after checking account ownership and protecting other people's information.
• Corrections: you can update the editable profile fields in Profile. For an incorrect account email or other information you cannot edit yourself, email support with the correction requested. We may need additional account verification before changing authentication or billing records.
• Data deletion: you can request deletion of specified prompts, reference images, generated images, or other personal information. Tell us which records are involved; task IDs can help identify images without resending private content. We review the request and delete or anonymize the data where appropriate and required.
• Account closure: send a request with the subject “Account Closure” from your registered account email. After verifying ownership and confirming the consequences with you, we arrange account closure and deletion or anonymization of the associated personal data, subject to lawful retention. Download images you want to keep first. If you have unused purchased credits or an outstanding order, mention it so billing can be addressed under our Refund Policy and applicable law; asking to close an account does not by itself waive consumer rights.
• Other applicable rights: you may request a portable copy in a commonly used machine-readable format where applicable, restriction of processing, objection to processing, or withdrawal of consent for processing based on consent. Withdrawing consent does not affect processing that was lawful before withdrawal. You may also complain to a competent data protection authority.

How requests are handled

We review the request, verify account ownership using the minimum information necessary, identify the affected records, and reply with the result or an explanation of any limitation. We do not ask you to send your password, one-time login codes, or full payment card details. If you no longer have access to your registered email, contact support to discuss alternative verification.

We respond within the period required by applicable law. Where no other period applies, our target is to provide a result or a progress update within 30 calendar days of receiving the request. If clarification or a lawful extension is needed, we explain the reason and the expected next steps. This is a manual support process, not an instant automated deletion promise.

Some transaction, security, dispute, or legally required records may need to be retained instead of deleted. Backup copies may persist until they are replaced under our backup process; required retention and any limits on deletion will be explained in our response. Such retention does not permit unrelated use of your information. Where a request concerns information held by a separate payment or AI provider, we explain the relevant provider's role and, where appropriate, direct you to its request channel.

Security, children, and updates

We use account access controls and private storage routes, but no online service can guarantee absolute security. Picshik is not directed at children; users must meet applicable age and authorization requirements. Changes to the published policy will be identified by an updated date, and material changes will be communicated as required.

Related pages: Terms of Service, Refund Policy, and Contact.