Privacy notice

Data controller

ProPicAi is operated by PROSOFT VR. Contact: info@prosoftvr.com. This notice is provided under Article 10 of the Turkish Personal Data Protection Law (KVKK) and, where applicable, the GDPR.

Data we process

Account data: name, email address, password hash, session and IP information.

Photos you upload and the images generated from them. Portrait commands involve images of faces.

Commands you choose, text you enter, credit transactions and your consent records.

Purposes and legal bases

Providing the service and performing our contract: your account, image generation, credit management.

Processing photos that contain faces relies solely on your explicit consent, which we ask for before every portrait generation.

Security and abuse prevention (legitimate interest): content moderation, rate limiting, sign-up protection.

International transfers

To generate images and moderate content, your photo and text are sent to our AI providers (Google LLC — Gemini; OpenAI — image and moderation models) on servers in the United States, based on your explicit consent and our contracts with them. We use the providers' paid API tiers, under which data is not used to train their models.

Retention

Photos containing faces are deleted automatically 30 days after they are used in a generation.

Other uploads and generated images are kept until you delete your account or the workspace.

When you delete your account your data is deleted immediately and removed from backups within 14 days.

Your rights

You can request access, correction, deletion, the list of recipients, and object to processing: info@prosoftvr.com. You can also delete your account and all its data yourself on the Account page.

If you believe a face image is used without permission, write to info@prosoftvr.com; we review and remove it.