Privacy Policy

This policy explains how Red Moon Marketing FZCO (“PMUMagic”, “we”, “us”), as data controller, collects and uses personal data when you use the PMUMagic Retouch Studio (the “Service”). Company details are at the bottom of this page.

1. Data we collect

• Account data — name, email address and login identifiers, managed through our authentication provider (Clerk).
• Photos — the images you upload for retouching and the edited results, including images you choose to share or publish (see section 3).
• Payment data — purchases, credits and subscription status. Card details are collected and processed by Stripe; we never see or store full card numbers.
• Usage data — in-app events (for example screens viewed, features used), basic device and browser information, and error reports.
• Communications — emails you send us and, where enabled, transactional emails we send you (welcome, purchase confirmations and similar).

2. How we use data

• To provide the Service: process your photos, deliver results, maintain your credit balance, and operate sharing and portfolio pages you create.
• To process payments and prevent fraud.
• To operate, secure, debug and improve the Service.
• To send service-related emails. Marketing emails are only sent with a working unsubscribe.
• To comply with legal obligations.

Legal bases where GDPR applies: performance of contract (providing the Service), legitimate interests (security, product improvement), consent (where required), and legal obligation.

3. Your photos, specifically

• Uploaded photos are transmitted securely and processed by our image-processing partners solely to produce the edit you requested.
• Results are delivered back to your device; your working gallery lives in your browser’s local storage on your device, not on our servers.
• An image is stored on our servers only when a feature requires it, most notably when you create a share link or add a work to your public portfolio. Those images stay stored while the share or portfolio entry exists and are removed when you delete it.
• We do not use your photos to train AI models and we do not sell them or license them to anyone.
• Photos of your clients are your responsibility: you must have each client’s consent before uploading or publishing their photo, as set out in our Terms of Service.

4. Service providers (processors)

We share data with providers only to the extent needed to run the Service:

• Clerk — authentication and account management.
• Stripe — payment processing.
• Vercel — hosting and content delivery.
• Supabase — database hosting.
• Retouch4Me — cloud image processing that performs the retouch.
• Anthropic — text-based AI features (for example interpreting your correction request); these features send instructions, not your account identity.
• Sentry — error monitoring.
• Resend — transactional email delivery, where enabled.

These providers may process data outside your country, including in the United States and the European Union. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses offered by the provider.

5. Cookies

We use only cookies and similar storage that are necessary for the Service to work: keeping you signed in (authentication cookies) and remembering in-app preferences on your device. We do not use advertising or cross-site tracking cookies.

6. Retention

• Account data: for as long as your account exists, then deleted or anonymized.
• Server-stored images (share links, portfolio): until you delete them or your account.
• Payment and credit records: as long as required for accounting and legal purposes.
• Usage events and error logs: for a limited period appropriate to security and product improvement.

7. Your rights

Depending on your location, you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority. To exercise any right, email office@pmumagic.com from the address linked to your account. Deleting your account removes your data as described in section 6.

8. Security

Data is encrypted in transit, access to production systems is restricted, and payment card data never touches our servers. No system is perfectly secure; if a breach affecting your data occurs, we will notify you as required by law.

9. Children

The Service is intended for professionals and is not directed at anyone under 18. Do not upload photos of minors.

10. Changes

We may update this policy from time to time. Material changes will be announced in the app or by email, and the date above will always reflect the current version.

11. Contact

Privacy questions and requests: office@pmumagic.com.