Privacy notice

Last updated: August 26, 2026

Photo bytes stay in your browser

PicSpec does not send selected photos or editor canvas data to an application server or database. Editor state stays only in the current page's memory; your browser may cache model resources. PicSpec does not persist photos or editor state to browser storage.

Account and payment data

When you create an account, Better Auth stores account and session records. Resend may process email addresses to deliver verification and recovery messages. When you start checkout, Waffo receives the signed-in account email and checkout details and processes any buyer and payment data needed for that checkout. PicSpec stores the payment status and account reference in Neon to verify and restore the Print Pack entitlement. A Waffo checkout marked Test Mode does not make a real charge.

Human verification and analytics

Cloudflare Turnstile is used only on email account entry points when it is configured. Google Analytics 4 (GA4) and Vercel Web Analytics load only after you accept the analytics consent banner. If you reject, PicSpec does not load either service or send analytics requests. GA4 receives only the eight product funnel event names, optional country and document labels, and standard browser measurement data. Vercel Web Analytics receives anonymous page-view data such as the page path, referrer, approximate location, browser, operating system, and device type for aggregated traffic reports. PicSpec removes query strings and does not add your email, order number, photo, or editor image data to either service.

Your data rights

You may request access to or a copy of the personal data PicSpec controls about you, correction of inaccurate data, deletion of that data, or closure of your PicSpec account and associated data. Send your request from your registered account email to support@picspec.app. We may verify your identity before acting and will respond within 30 calendar days.

When we process a deletion or account-closure request, we delete or anonymize PicSpec-controlled account, session, and associated data that we no longer need. We may retain transaction, anti-fraud, tax, and dispute records where required or permitted by law, and use them only for those limited purposes. Photos are processed in your browser and are never uploaded to PicSpec, so PicSpec has no server-side photos to delete. Closing your account ends access to the Service and may affect any associated entitlement. This request does not delete data held by independent controllers such as Waffo; contact those providers under their own policies.

Contact

Privacy questions can be sent to support@picspec.app.