Privacy policy

Data controller

The controller responsible for processing your data is BoCode Labs UG (haftungsbeschränkt), Lehderstr. 112, 13086 Berlin, Germany. Piktura is a brand of BoCode Labs UG (haftungsbeschränkt). Full details are in the legal notice.

For privacy questions, contact hello@bocode-labs.com.

What we collect

• Account data: your email address and, if you choose to save projects, a password or sign-in identifier.
• Photos you upload: the original images you provide for cleanup, transformation, triptych, or restoration.
• Generated content: AI previews, print files, and any crop or option choices you make.
• Order data: shipping address, product selection, and payment confirmation (not your card number — see "Payment" below).
• Technical data: IP address, browser type, and basic usage logs needed to operate and secure the service.

How we use your photos

Your photos are used only to generate your preview and, if you place an order, to produce your physical print. We do not use your uploads to train AI models, and we do not sell or share your photos for marketing or advertising.

Uploaded photos may contain personal data of people who appear in them. By uploading, you confirm you have the right to use the photo and, where required, the consent of any identifiable people in it.

AI processing

To generate previews, your photo is sent to our AI image generation provider for processing. This is a necessary step to deliver the cleanup, style transformation, triptych, or restoration you request.

Colorization results are an AI interpretation of the original photo's colors, not a historical reconstruction — this is disclosed wherever colorized results are shown.

EXIF and GPS metadata is stripped from generated preview and print files before they are stored or delivered.

Who we share data with (processors)

We use a small set of specialist providers to run Piktura. Each acts under a data processing agreement and only accesses what it needs to perform its function:

• AI image generation provider — processes your photo to create previews.
• Cloud storage provider — stores uploads, previews, and print files securely.
• Stripe — processes payment; Piktura never sees or stores your full card details.
• Prodigi (print fulfilment) — receives your print file and shipping address to produce and ship your order.
• Email service provider — sends order confirmations and account notifications.

Retention

We keep data only as long as needed for the purpose it was collected:

• Anonymous draft projects (no account, no order): deleted after 7–14 days.
• Original uploads: deleted after 30 days unless saved to an account.
• Generated previews: deleted after 30–90 days.
• Paid order print files: retained until delivery plus a support window, then archived or deleted.
• Order, invoice, and payment metadata: retained as required by applicable EU and German accounting and tax law.

Your rights

Under the GDPR, you can request access to, correction of, or deletion of your personal data, and you can object to or restrict certain processing. You can delete uploaded photos and draft projects from your account at any time.

To exercise these rights, contact us at the address below. We will respond within the timeframes required by applicable law.

International transfers

Where a processor is located outside the EU/EEA, we rely on adequacy decisions or standard contractual clauses to ensure your data remains protected to an equivalent standard.

Security

Secrets and credentials are encrypted, and original photos and print masters are held in private, access-controlled storage. Access is limited to what is necessary to operate the service.

Contact

Questions about this policy or your data can be sent to hello@bocode-labs.com. Full company details are available in our legal notice.