Privacy Policy

Last updated: April 13, 2026

We want you to understand exactly what happens with your data when you use Photo Spells. This policy is written in plain language because we believe privacy shouldn't require a law degree.

Who we are

Photo Spells is an AI photo transformation service operated by Maren Solvik, based in Trondheim, Norway. If you have questions about this policy, you can reach us at privacy@photospells.com.

What we collect

When you use Photo Spells, we collect the following information:

  • Account information -- your email address and display name when you sign up.
  • Payment information -- if you subscribe to a paid plan, Stripe processes your payment details. We never see or store your full card number.
  • Usage data -- which features you use, how many transformations you run, and basic analytics to improve the service.
  • Photos you upload -- the images you submit for AI transformation.
  • Device and browser data -- your IP address, browser type, and operating system, collected automatically through server logs.

What we don't collect

We don't store your photos longer than 24 hours after processing. Once your transformation is complete and you've had time to download the result, both the original and transformed images are permanently deleted from our servers.

We don't sell your data to third parties. We don't build advertising profiles. We don't track you across other websites.

How we use your data

We use the information we collect to:

  • Provide and operate the Photo Spells service.
  • Process your photo transformations.
  • Manage your account and subscriptions.
  • Send transactional emails (receipts, password resets, important service updates).
  • Improve the service based on aggregated, anonymized usage patterns.
  • Prevent abuse and maintain security.

Cookies

We use a small number of cookies to keep you logged in and to remember your preferences. We don't use third-party advertising cookies or tracking pixels.

Essential cookies are required for the service to function. You can disable them in your browser settings, but some features won't work without them.

Data retention

  • Photos -- deleted within 24 hours of processing.
  • Account data -- kept for as long as your account is active. If you delete your account, we remove your personal data within 30 days.
  • Payment records -- retained as required by Norwegian tax and accounting law (typically 5 years).
  • Server logs -- automatically purged after 90 days.

Your rights

Under the General Data Protection Regulation (GDPR) and Norwegian data protection law, you have the right to:

  • Access -- request a copy of the personal data we hold about you.
  • Rectification -- ask us to correct inaccurate data.
  • Erasure -- ask us to delete your personal data.
  • Portability -- receive your data in a structured, machine-readable format.
  • Restriction -- ask us to limit how we process your data.
  • Objection -- object to certain types of processing.

To exercise any of these rights, email us at privacy@photospells.com. We'll respond within 30 days. If you're not satisfied with our response, you can file a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Third-party services

We rely on a small number of trusted third parties to operate Photo Spells:

Each of these providers processes data on our behalf under agreements that comply with GDPR requirements.

Security

We take reasonable technical and organizational measures to protect your data. This includes encryption in transit (TLS), secure authentication, and access controls on our infrastructure. That said, no system is 100% secure, and we can't guarantee absolute protection.

Contact

If you have questions or concerns about this privacy policy, please reach out:

Photo Spells
Maren Solvik
Trondheim, Norway
privacy@photospells.com

Changes to this policy

We may update this privacy policy from time to time. When we make significant changes, we'll notify you by email or through a notice on the website. The "last updated" date at the top of this page reflects the most recent revision.