Privacy policy

DRAFT - owner to review. This draft describes what the app does today. Have it checked before you rely on it, and update it whenever the app changes.

Last updated: 10 November 2026. Contact: the Feedback button in the app.

Who we are

"ShotKart", "we" and "us" in this policy mean the ShotKart service at this website.

Information we collect

• Account details: your email address and a securely hashed version of your password. We never store your password in plain text.
• Photos you upload: used only to create the images you ask for. See "Your photos" below.
• What you ask the tools to make: the product name, scene and settings you choose, linked to your account if you're logged in.
• Usage and security data: your IP address, an approximate location (country, region and city) looked up from the IP address, your device type (mobile, tablet or desktop), the pages you visit and where you came from. We use this to count visitors, enforce free limits and prevent abuse.
• Payments: the order ID, amount and status. Card and bank details are handled by our payment provider, not stored by us.
• Feedback you send us, with your IP address.

Your photos

When you use a tool, your photo is processed on our server and sent to a third-party AI image service to generate the new image. We don't keep your uploaded photo or the generated images on our servers after the result is sent back to you. The AI services we use may process the images under their own terms.

Cookies and browser storage

• A login cookie that keeps you signed in. It's only used for your session.
• Browser storage with a random visitor ID (to count returning visitors and apply free limits), the campaign tag of the link you first arrived from, and whether you closed an announcement.

We don't use advertising cookies or third-party analytics trackers.

Service providers

We use these services to run ShotKart: Vercel (website hosting), Render (application server), TiDB Cloud (database), Razorpay (payments), Brevo (account emails), an IP location service (ipwho.is), and AI image services (currently Pixazo, Cloudflare Workers AI, Pollinations and Google Gemini). They process data only as needed to provide their service.

Safety and abuse prevention

Requests for adult or explicit content are blocked and logged. Repeated attempts can lead to an account being suspended or an IP address being blocked.

How long we keep data

We keep your account details while your account is open. Activity and visit records are kept to run the service, count visitors and prevent abuse. You can ask us to delete your account and data at any time.

Your choices

You can ask us to access, correct or delete your account and data by sending us a message with the Feedback button in the app. Depending on where you live, you may have other rights under local privacy law.

Children

ShotKart is not meant for children under 13.

Changes

We'll update this page when the way we handle data changes, and change the date at the top.