This policy describes the personal data NICESHOT.ai collects, the basis for processing it, where it is transferred, and how you exercise your rights.
In short: we process data to run the service, we do not sell it, and we do not use your content to train models.
NICESHOT.ai is the party that decides the purposes and means of processing the personal data described in this policy when you use the service.
For questions about this policy or to exercise your rights, contact privacy@niceshot.ai. For general support issues unrelated to personal data, use support@niceshot.ai.
This policy applies to the NICESHOT.ai website, your account, and every AI content-generation tool we provide.
We distinguish basic personal data — such as name, electronic mail address, account identifier, device and connection data — from sensitive personal data. A photograph depicting an identifiable person is handled as sensitive personal data.
Account data includes your name, electronic mail address, avatar, login method, and details you provide when contacting support. Creative content includes prompts, uploaded files, the model you choose, generation parameters, and the outputs produced.
Payment data is handled by our payment provider — your card number never reaches NICESHOT.ai systems. Technical and device data includes the address of your connection, browser, timestamps, and trace identifiers used for debugging.
We also use cookies and local storage, detailed in the Cookie Policy. If you connect a third-party agent client through the /mcp interface, we record that connection and the actions the client takes on your account. Finally, we record referral attribution when you arrive through an invitation.
You may upload photographs of people as generation references, for example a portrait used as a likeness. These images are handled as sensitive personal data.
By uploading a photograph of another person, you confirm that person consented to this use. NICESHOT.ai does not use these images to train AI models.
Images are transmitted to third-party model providers to produce the result you request. You may delete an image from your media library at any time.
We process data to operate your account and to run the generation jobs you request, on the basis of performing the agreement between you and NICESHOT.ai.
Charging credits and processing payment also rest on performance of the agreement, and additionally meet legal accounting duties. Preventing fraud and securing the system rest on our legitimate interest.
Usage analytics, as well as advertising measurement and personalisation, are carried out only with your consent. Responding to your support requests rests on performance of the agreement.
We share data by function, not by naming specific vendors: authentication, payment, storage and content delivery, electronic mail, artificial-intelligence model providers, analytics, logging and monitoring, and security.
Each recipient receives only the data its function requires. We do not sell your personal data.
We may also disclose data to comply with a legal requirement, to investigate abuse, or in a merger or asset transfer, in which case you will be informed.
Your data, including images you upload, may be processed outside Vietnam — in the United States, Singapore, and the European Union — where our model, storage, and payment providers operate their infrastructure.
We impose contractual safeguards on recipients of data transferred abroad. You have the right to be informed of this transfer and the right to object to it.
We use four groups of cookies and similar storage technologies: strictly necessary, functional, analytics, and advertising.
Analytics and advertising cookies run only when you consent. The full inventory of each cookie, its purpose, and its lifetime is in the Cookie Policy.
Generated results are deleted after a period that depends on your plan: 14 days on the free plan, 60 days on creator, 180 days on pro, and 730 days on studio and enterprise.
Account data is kept for as long as the account exists. Payment and invoicing records are kept as long as accounting law requires. System backups age out on their own cycle.
You have the right to be informed how your data is processed — this policy is how we fulfil that right. You have the right to consent, to refuse, or to withdraw consent at any time at the privacy centre at /account/privacy.
You have the right to access and receive a copy of your data by sending a request by electronic mail to privacy@niceshot.ai. You can correct some information yourself in account settings, or send a request to delete, restrict, or object to processing.
You have the right to complain to the competent authority. We may require identity verification before acting on a request, and we respond within thirty days.
We apply technical and organisational measures to protect your data, including encryption in transit, access control, and activity logging. No system, however, can be guaranteed perfectly secure.
If a personal data breach occurs, NICESHOT.ai notifies the competent authority and affected users within seventy-two hours of becoming aware of it.
NICESHOT.ai is not intended for people under sixteen. We do not knowingly create accounts for anyone under that age.
If we learn that an account belongs to someone under sixteen, we delete the account and its data. A parent or guardian may report such an account to privacy@niceshot.ai.
We may change this policy as the product, our providers, or legal requirements change. Each new version carries a new effective date.
If a change is material, the consent banner is presented again so you can confirm your choice. Continuing to use the service after the effective date means the new version applies to you.