Your privacy matters. We're transparent about what we collect and why.
Last Updated: October 23, 2025
Effective Date: October 23, 2025
Welcome to PicForge ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image transformation platform at picforge.com.
PicForge is operated by Derek Bobola, owner of Bobola's Restaurant in Nashua, NH. We built PicForge to make AI image editing accessible, fun, and powerful for everyone.
If you do not agree with this policy, please do not use our services.
We use your personal information for the following purposes:
Legal Basis (GDPR): We process your data based on (1) your consent, (2) contractual necessity to provide services, (3) our legitimate interests in improving the platform, and (4) legal compliance requirements.
We use the following third-party services that may collect your data:
Purpose: User authentication (magic links) and database storage
Data Shared: Email address, user ID, images, favorites, usage stats
Privacy Policy: instantdb.com/privacy
Purpose: Payment processing for Pro subscriptions
Data Shared: Payment information, billing address, email
Compliance: PCI DSS Level 1 certified
Privacy Policy: stripe.com/privacy
Purpose: AI image transformation and processing
Data Shared: Uploaded images, transformation prompts
Privacy Policy: policies.google.com/privacy
Purpose: Website traffic analysis and user behavior tracking
Data Shared: IP address, page views, session data, device information
Privacy Policy: policies.google.com/privacy
Purpose: Transactional email delivery
Data Shared: Email address, email content
Privacy Policy: resend.com/privacy
Purpose: Website hosting and analytics tracking
Data Shared: Visitor counts, share tracking, template usage
Privacy Policy: vercel.com/legal/privacy-policy
Note: We do not control these third-party services and are not responsible for their privacy practices. Please review their privacy policies directly.
Depending on your location, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at:
Email: derek.bobola@gmail.com
Subject: "Privacy Rights Request - PicForge"
Response Time: We will respond within 30 days (GDPR) or 45 days (CCPA).
Identity Verification: We may request additional information to verify your identity before processing requests.
We implement industry-standard security measures to protect your data:
TLS/SSL encryption for all data in transit. Database encryption at rest via InstantDB.
Role-based access, admin-only promo code generation (derek.bobola@gmail.com).
Stripe handles all payment processing (PCI DSS Level 1). We never store card details.
Automated error logging, rate limiting (500 requests/day/IP), abuse detection.
Important: No security system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Use strong passwords and enable two-factor authentication when available.
In the event of a data breach affecting your personal information, we will notify you within 72 hours (GDPR requirement) via email and provide details about the breach, affected data, and steps we're taking to resolve it.
We retain your data for as long as necessary to provide services and comply with legal obligations:
Automatic Deletion: Uploaded images are automatically deleted after 30 days. Transformed images in your account are deleted after 90 days or upon account deletion.
PicForge is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.
If you believe we have inadvertently collected data from a child under 13, please contact us immediately at derek.bobola@gmail.com and we will delete it.
Your data may be transferred to and processed in the United States and other countries where our service providers operate.
EU/EEA Users: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers outside the EEA. Our service providers (InstantDB, Stripe, Vercel) have implemented appropriate safeguards to protect your data.
By using PicForge, you consent to the transfer of your data to countries with different data protection laws than your country of residence.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notification: Material changes will be communicated via:
Continued use of PicForge after changes constitutes acceptance of the updated policy.
For privacy-related questions, requests, or concerns, please contact:
Name: Derek Bobola
Company: Bobola's Restaurant / PicForge
Email: derek@pic-forge.com
Subject Line: "Privacy Request - PicForge"
Location: Nashua, NH, United States
Response Time: We aim to respond to all privacy inquiries within 2-3 business days, with formal requests processed within 30 days (GDPR) or 45 days (CCPA).
If you are located in the EU/EEA and need to contact a representative, please email derek@pic-forge.com with subject "EU Data Protection Inquiry".
If you are not satisfied with how we handle your privacy concerns, you have the right to lodge a complaint with your local data protection authority:
PicForge is a project by Derek Bobola, owner of Bobola's Restaurant, Nashua NH