Privacy Policy

Vice Lab is an independent AI-powered photo transformation tool, operated as a sole proprietorship based in France. As a service established in the European Union, we are subject to the General Data Protection Regulation (GDPR).

Contact: vicelabapp@gmail.com

• Uploaded images: processed in memory only and never stored on our servers. Your photos are permanently discarded immediately after the transformation is complete.
• Local storage: a free-use counter stored exclusively in your browser's localStorage. No personally identifiable information is collected for free users.
• Account data (paid plans): your email address is stored securely via Supabase to manage your credits and subscription. We collect only what is strictly necessary.
• Payment data: all payments are processed by Stripe. We never access or store your card details.

• Contract performance (Art. 6.1.b): processing your email and credits to deliver the paid service you purchased.
• Legitimate interest (Art. 6.1.f): fraud prevention and service security.
• Legal obligation (Art. 6.1.c): retaining transaction records as required by French tax law.

• To perform the AI image transformation you requested.
• To manage your credits and subscription (paid plans only).
• To send transactional emails (purchase confirmation, password reset).
• We never sell your data to third parties.
• We never use your images to train our AI model without separate explicit consent.

• Stripe: payment processing. Subject to their own privacy policy. PCI DSS certified.
• Supabase: authentication and database for paid accounts. Hosted in the EU (Frankfurt).
• Google (Gemini API): AI image generation. Images are transmitted to Google's API for processing and deleted immediately after. Subject to Google's API Terms of Service.
• Resend: transactional email delivery. Your email address is transmitted solely to send service emails.

• Uploaded images: deleted immediately after generation. No exceptions.
• Account email and credits: retained for the duration of your account and deleted upon request.
• Payment records: retained for 10 years as required by French commercial law (invoices and transaction data).
• localStorage data: cleared at any time via your browser settings. We do not have access to it.

As an EU resident, you have the right to:

• Access (Art. 15): obtain a copy of all personal data we hold about you.
• Rectification (Art. 16): correct any inaccurate personal data.
• Erasure (Art. 17): request deletion of your data ("right to be forgotten").
• Portability (Art. 20): receive your data in a structured, machine-readable format.
• Objection (Art. 21): object to processing based on legitimate interest.
• Restriction (Art. 18): request that we limit how we use your data.

To exercise any of these rights, contact us at vicelabapp@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.

• We use only technical localStorage to store your free transformation counter. No personal data is involved.
• Supabase sets a session cookie for authenticated users (paid plans). This cookie is strictly necessary for the service to function and does not require consent under GDPR.
• No advertising, tracking, or analytics cookies are used.
• No third-party tracking scripts are loaded.

• All results produced by Vice Lab are AI-generated content.
• Free-tier results include a visible watermark identifying them as AI-generated, in compliance with EU AI Act Article 50 (applicable from August 2026).
• Vice Lab is not affiliated with Rockstar Games or Take-Two Interactive. GTA VI is a registered trademark of Take-Two Interactive Software, Inc.

Questions about this policy? Contact us at vicelabapp@gmail.com.

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users at least 15 days before taking effect. Continued use of the service after that date constitutes acceptance of the updated policy.