Privacy Policy

Last updated: October 29, 2026

Who is responsible

AI Christmas Photo (aichristmasphoto.net) is operated by Ye Fang Yao, an individual based in the United Kingdom, who is the data controller for the personal data described here. Contact: [email protected].

What we collect

  • The photos you upload, the optional details you type, and the photos and videos we create. Card text you add in the card editor stays in your browser and is never sent to us.
  • Your email address if you sign in.
  • A device cookie and your IP address, used to limit free uses and prevent abuse.
  • Order records (pack, amount, date) if you buy credits. Card details go to the payment provider, not to us.

Why we use it

  • To create the photo or video you asked for (performing our contract with you).
  • To run your account, credits and refunds (contract).
  • To prevent fraud, abuse and harmful content (our legitimate interests).
  • To keep financial records (legal obligation).

We do not sell your data and we do not use your photos or text to train AI models.

How long we keep it

Uploaded files and results are deleted automatically 24 hours after they are created. Optional details you type are sent to our AI providers to produce your result. Account and credit records are kept while your account exists. Order records are kept as long as tax law requires.

Who processes your data

  • Cloudflare: hosting, file storage, email delivery and automated content moderation.
  • Neon: account and order database.
  • AI model providers (such as WaveSpeed): receive your photo and optional details only to create your result.
  • Payment providers such as Stripe: process payments.

Some of these providers process data outside the UK, including in the United States, under standard data protection safeguards.

Cookies

We use necessary cookies to keep you signed in and to count free credits per device. We do not use advertising cookies.

We use Microsoft Clarity to see how people use the site (clicks, scrolling, page views) so we can make it easier to use. Clarity only sets its analytics cookies if you click Accept in the cookie banner; otherwise it runs without cookies. What you type into forms is masked, and the files you upload are not sent to Clarity. See the Microsoft Privacy Statement.

Your rights

You can ask to access, correct, export or delete your data, or object to how we use it, by emailing [email protected]. We reply within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).