This Privacy Notice explains how Cervo Group Sagl ("we", "us", "our"), operating the Piccars service ("Piccars", the "Service"), collects, uses, and protects your personal data when you use piccars.com and related applications.
1. Data Controller
Cervo Group Sagl is the data controller responsible for the personal data described in this Notice. If you have questions about your data, contact us at privacy@piccars.com.
2. Personal Data We Collect
- Account data: email address, name, authentication identifiers, hashed credentials.
- Content: car photos you upload, generated images, prompts, watermark settings, folders.
- Usage and telemetry: pages visited, features used, device and browser info, IP address, approximate location (country).
- Support data: messages you send us and metadata about those messages.
- Billing identifiers: subscription status, plan tier, customer ID from our payment provider. Card and bank details are processed by Paddle and never reach our servers.
3. Purposes and Legal Bases
- Provide the Service (contract performance): account creation, photo processing, storage of your library.
- Security and fraud prevention (legitimate interests): abuse detection, rate limiting, audit logs.
- Product improvement (legitimate interests): aggregated analytics, debugging.
- Customer support (contract performance / legitimate interests): responding to your requests.
- Billing and tax compliance (legal obligation / contract): processed via Paddle as our Merchant of Record.
- Marketing (consent, where required): only if you opt in.
4. Data Sharing
- Subprocessors: hosting, database, AI image-processing, email delivery, and analytics providers acting on our instructions.
- Paddle.com Market Ltd, our Merchant of Record, for sale of subscriptions and credit packs, payment processing, subscription management, tax compliance, invoicing, and refunds.
- Professional advisers: legal, accounting, and audit firms when needed.
- Authorities: where required by law, court order, or to protect rights and safety.
We do not sell your personal data.
5. International Transfers
Some of our providers may process data outside Switzerland or the EEA. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Retention
We retain account data for as long as your account is active. Uploaded and generated images are kept until you delete them or close your account. Billing records are kept for the period required by tax law (typically 10 years in Switzerland). Logs are kept for up to 12 months. After these periods, data is deleted or anonymised.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with a supervisory authority (e.g. the Swiss FDPIC, or your local EU/EEA DPA).
To exercise any of these rights, email privacy@piccars.com. We respond within one month.
8. Security
We implement appropriate technical and organisational measures, including encryption in transit, access controls, hashed credentials, and regular review of subprocessors.
9. Cookies
We use essential cookies and similar technologies to keep you signed in and to operate the Service. We may use analytics cookies to understand aggregate usage. You can manage cookie preferences through your browser settings.
10. Changes
We may update this Notice from time to time. Material changes will be announced through the Service or by email.
11. Contact
Cervo Group Sagl
Email: privacy@piccars.com