Legal
Privacy Policy
How AI Studio processes personal data across the website, dashboard, desktop app, and Photoshop workflows.
Controller
Tommy Szewczuk, Max-Brauer-Allee 8, 22765 Hamburg, Germany. Email: info@photoshopkungfu.com.
Account and contract data
We process names, email addresses, organization details, account identifiers, subscription and credit records, API-key metadata, support messages, and audit records to provide accounts, licenses, billing, support, and fraud prevention. The legal bases include contract performance, legal obligations, and legitimate interests in operating and securing the service.
Desktop and generation data
The desktop app may send installation identifiers, app and platform versions, Photoshop version, license events, selected models, job status, reference counts, prompts, output URLs, provider billing details, and pseudonymous provider-key fingerprints. Generation inputs and outputs are sent to the AI provider selected for the workflow.
Payments, email, and beta requests
Stripe processes payment and tax details. We store the related customer, checkout, product, payment-status, and entitlement information. Resend handles transactional email and consented marketing. Beta requests include the information submitted in the form plus anti-abuse and attribution data.
Analytics and diagnostics
We use product analytics and error monitoring, including PostHog and Sentry, to understand use, diagnose failures, and improve security. Detailed prompt analytics are sent only under the applicable consent setting. Raw payment credentials are not stored by AI Studio.
Recipients and international transfers
Data is shared only as needed with hosting, database, payment, email, analytics, support, and selected AI providers. Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful safeguard.
Retention
We keep account and contract records while the account is active and as required for tax, billing, legal claims, fraud prevention, and audit obligations. Security and operational records use bounded retention where configured. Generation and support records are retained as needed for the service and can be reviewed on a deletion request unless a legal duty requires continued storage.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent for future processing at any time. Contact info@photoshopkungfu.com. You may also complain to a competent data-protection supervisory authority.
Required data and automated decisions
Account, billing, and licensing data is required to provide paid access. Security systems may automatically rate-limit or block suspicious requests, but consequential account actions are reviewed under the applicable workflow.
Effective August 20, 2026 · Imprint and contact details.