Privacy Policy

1. Introduction

Loiso AI (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use our website and AI product photography service (“Service”), including for users in South Africa. By using the Service, you consent to the practices described here.

2. Information we collect

We may collect:

• Account and profile data: name, email address, password (hashed), and any profile or billing details you provide.
• Content you upload: product images, reference photos, and other files you submit for generation.
• Usage and technical data: how you use the Service, device and browser information, IP address, and log data.
• Payment information: processed by third-party payment providers (e.g. Paystack); we do not store full card details.

3. How we use your information

We use the information to:

• Provide, maintain, and improve the Service.
• Process generations, manage your account, and handle billing.
• Send service-related communications and, with your consent, marketing.
• Analyse usage patterns and improve our models and product experience.
• Comply with legal obligations and protect our rights and users’ safety.

4. Legal basis (including POPIA)

Where applicable, we process personal data on the basis of consent, contract performance, legitimate interests, or legal obligation. For South African users, we process personal information in line with the Protection of Personal Information Act (POPIA) and only where we have a lawful basis to do so.

5. Sharing and disclosure

We may share data with service providers (hosting, payment, analytics, AI infrastructure) who assist in operating the Service under strict confidentiality and data-processing terms. We may disclose information if required by law, to enforce our terms, or to protect rights and safety. We do not sell your personal information to third parties for their marketing.

6. Data retention and security

We retain your data for as long as your account is active or as needed to provide the Service, resolve disputes, and comply with law. We use industry-standard technical and organisational measures to protect your data. No system is completely secure; you use the Service at your own risk.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal information, or to data portability. In South Africa, you have rights under POPIA, including the right to object and to lodge a complaint with the Information Regulator. To exercise these rights, contact us using the details below.

8. International transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) where required by applicable law.

9. Cookies and similar technologies

We use cookies and similar technologies for authentication, preferences, security, and analytics. You can manage cookie preferences in your browser; some features may not work fully if you disable cookies.

10. Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children; if we learn we have done so, we will delete it promptly.

11. Changes and contact

We may update this Privacy Policy from time to time. We will post the revised version on our website and update the “Last updated” date. Continued use after changes constitutes acceptance. For privacy-related questions or to exercise your rights, contact us via the support or contact options on our website.