This Privacy Policy explains what personal data is collected, stored and processed when visiting and using aicarstudio.org. It applies in accordance with the Swiss Data Protection Act (nDSG) and the EU General Data Protection Regulation (GDPR).
The data controller is the operator of AI Car Studio. Contact: koc.okan6161@gmail.com
The following data is collected upon registration:
The following is stored in the user account:
To prevent abuse, your IP address is processed and stored: at registration and as a counter for free test images (without sign-in max. 3 per device and 15 per network connection). For the device limit, a random device identifier is also stored in your browser's LocalStorage. For the storage of photos and images, see section 2.5.
Payments are handled entirely by Stripe. AI Car Studio does not store any credit card data. Stripe's privacy policy applies (stripe.com/privacy).
Uploaded vehicle photos are transmitted to a third-party AI API for processing and are not stored there permanently. We store uploaded photos (vehicle, background, logo) and the created images privately for 30 days with Google Cloud (data centre in Belgium): so that signed-in users can view and download them again under “My Images”, so that test images can be unlocked without watermark after a purchase, and for quality assurance and support. Only you (for your own images) and the operator have access. After 30 days the images are deleted automatically.
If you write to us via the contact form, we store your name, email address, optionally your company, the selected topic and your message, as well as a non-reversible checksum (hash) of your IP address to prevent abuse. The data is used solely to handle your enquiry, stored with Google Cloud (data centre in Zurich) and deleted automatically after 12 months at the latest.
Data transfer to the USA is based on EU Standard Contractual Clauses (SCCs).
Technically necessary: Firebase Authentication uses browser LocalStorage to store the login session. Your cookie choice is also stored locally.
Only with your consent via the cookie banner: Google Analytics 4, Google Ads and Microsoft Clarity set cookies or similar technologies to measure page views, usage flows (e.g. sign-up, image generation, opening the checkout) and advertising success. Microsoft Clarity creates anonymised session recordings and heatmaps; sensitive input (e.g. passwords, email addresses) is masked. Google Analytics does not store IP addresses.
Without consent these services set no cookies; via Google Consent Mode, Google only receives cookieless signals without personal reference (e.g. that a page view took place). The legal basis is your consent (Art. 6(1)(a) GDPR or Art. 6(6) and 31 Swiss FADP). You can withdraw or change your consent at any time via the “Cookie settings” link in the website footer.
Please send requests to: koc.okan6161@gmail.com
All data is transmitted encrypted via HTTPS/TLS. Database access is restricted to the respective user by Firebase Security Rules. API keys are stored exclusively server-side in Firebase Secrets Manager.
User data is stored for as long as the account is active. After account deletion, all data is removed within 30 days. IP addresses for abuse prevention are deleted after 12 months.
You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch