Privacy Policy
Last updated: November 4, 2026
Your photos are often of your clients, so we treat them with care: they are stored privately, only used to make your stencils, and never used to train AI or in our marketing. This policy explains what we collect and why.
Who we are
StencilPilot (stencilpilot.com) is operated from Türkiye and is responsible for your personal data as the data controller. For any privacy question or request, email support@stencilpilot.com.
What we collect
- Account details: your email address, and if you sign in with Google, the name and profile picture Google shares with us.
- Photos and stencils: the photos you upload, the stencils created from them, and details such as the style you chose and when you made them.
- Purchases and credits: your plan, billing period, credit balance and purchase history. Your card or bank details go directly to Polar; we never see or store them.
- Technical data: your IP address, browser type and request logs, which we use to keep the service secure (for example to limit repeated checkout attempts) and to fix errors.
- Messages: what you send us when you email support.
Why we use it
- To provide the service you asked for (performance of our contract with you): signing you in, creating, storing and showing your stencils, keeping track of credits and plans.
- To keep StencilPilot safe (our legitimate interest): preventing fraud, card testing and abuse, and keeping the service running.
- To meet legal obligations, such as keeping records of purchases.
- To answer your messages and send service emails such as sign-in links. We will only send marketing emails if you agree to them, and you can unsubscribe at any time.
We do not sell your personal data, and we do not share it for advertising.
Your photos and AI
When you create a stencil, your photo is sent to our AI provider, fal.ai, through a short-lived private link, and the finished stencil is stored in our private storage. Photos and stencils are only shown to you, through links that expire. We do not use your photos or stencils to train AI models, and the example images on our website are made from our own photos.
Who processes your data
We use these service providers to run StencilPilot. They only process your data to provide their service to us:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-inUnited States | United States |
| Cloudflare | Website hosting, private file storage, support email forwardingGlobal network | Global network |
| fal.ai | AI processing that turns your photo into a stencilUnited States | United States |
| Polar | Checkout, payments, taxes and invoices (merchant of record; handles card details, which we never see)United States | United States |
| Resend | Sending sign-in links and service emailsUnited States | United States |
| Sign-in, only if you choose “Continue with Google”United States | United States |
Polar is also responsible for the payment data it processes as merchant of record, under its own privacy policy. Because these providers operate in other countries, your data may be transferred outside your country, including to the United States. Where the law requires it, these transfers are protected by safeguards such as the European Commission's standard contractual clauses.
How long we keep it
- Uploaded photos are deleted automatically 30 days after upload.
- Stencils are kept until you delete them (you can delete any stencil, together with its photo, in the app) or until your account is deleted.
- Account and credit records are kept while your account is open, and deleted when you ask us to close it, except for purchase records we must keep by law.
- Technical logs are kept for a short time, usually a few weeks.
Cookies
We only use cookies that are needed to keep you signed in. We do not use advertising or tracking cookies. If we add privacy-friendly visitor statistics, they will not use cookies to track you across websites.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, the KVKK in Türkiye, or US state privacy laws such as the CCPA), you can ask us to:
- give you a copy of your personal data, or send it to you in a portable format;
- correct data that is wrong;
- delete your data and your account;
- restrict or object to how we use your data;
- withdraw any consent you gave.
Email support@stencilpilot.com from your account email and we will respond within 30 days. We will not treat you differently for using these rights. You can also complain to your local data protection authority (in Türkiye, the Personal Data Protection Authority, KVKK).
Security
All connections to StencilPilot are encrypted (HTTPS). Photos and stencils are kept in private storage that is not publicly accessible, and access to our systems is limited and protected. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you as the law requires.
Children
StencilPilot is for adults and is not directed at anyone under 18. If you think a child has given us personal data, contact us and we will delete it.
Changes
If we change this policy, we will update the date at the top. For important changes we will also let you know by email or in the app. See also our Terms of Service.