paintame
Sign InStart Free

Privacy Policy

Last updated:

Last updated: January 14, 2026

At , we take your privacy seriously. We do not sell your personal data. We are committed to protecting your information and ensuring you maintain control over your data and your artistic creations.

This Privacy Policy describes how we collect, use, and protect your personal information when you use our services.

1. DATA CONTROLLER (WHO ARE WE?)

The data controller responsible for your personal data is:

  • Owner: Bernat Navacerrada Torras (trading as "")
  • ID (DNI): 45491752Y
  • Registered Office: C/ Manigua, 32, 3º 1ª, 08027 Barcelona, Spain
  • Contact Email:

Hereinafter, we will refer to ourselves as "", "we", or "our".

2. OUR SERVICES

offers a SaaS technological platform that allows artists, galleries, and creators to add Augmented Reality (AR) layers to physical artworks, as well as Artificial Intelligence (AI) assisted editing tools, WebAR services, and related applications.

3. WHAT DATA DO WE COLLECT?

We collect different types of information depending on how you interact with our platform:

A. Information you provide to us

  • Registration Data: Name, email address, username, and encrypted password when creating an account.
  • User Content (User Assets): Images of artworks, videos, animation files, descriptions, and metadata you upload to the platform to create AR experiences.
  • Billing Data: If you subscribe to a paid plan, we process data necessary for billing (legal name, address, Tax ID/VAT), although sensitive credit card data is managed directly by our payment provider (Stripe) and is not stored on our servers.
  • Communications: Information you share when contacting technical support or participating in surveys.

B. Information collected automatically

  • Technical Navigation Data: IP address, browser type, operating system, screen resolution, and WebAR usage data (dwell time, number of artwork scans).
  • Camera Data (WebAR): To enable the Augmented Reality experience, access to your device's camera is required. Important: In WebAR experiences, the processing of the camera feed is performed primarily locally on the user's device. does not record or store the video feed of artwork viewers, unless the user explicitly uses a "Record Experience" feature to share it on social media.

4. PURPOSE OF PROCESSING (WHY DO WE USE YOUR DATA?)

We only process your data for specific and legitimate purposes:

  • Service Provision: To enable registration, artwork uploading, AI processing (segmentation and animation), and AR visualization.
  • AI Processing: The images you upload may be processed by Artificial Intelligence algorithms (such as segmentation or inpainting models) for the sole purpose of generating the AR assets requested by you. We do not use your artworks to "train" public generative models without your explicit consent.
  • Payment Management: To process subscriptions and transactions via Stripe.
  • Support and Improvement: To resolve technical issues and analyze aggregated metrics to improve platform stability.
  • Communication: To send you notifications about your account, service updates, or newsletters (if you have given your consent, from which you can unsubscribe at any time).
  • Legal Compliance: To comply with tax and legal obligations in Spain and the EU.

5. LEGAL BASIS

The processing of your data is based on:

  • Execution of a contract: When registering and accepting the Terms and Conditions.
  • Consent: For the use of non-essential cookies, sending newsletters, or accessing the device camera.
  • Legitimate Interest: To ensure platform security and prevent fraud.
  • Legal Obligation: For billing and regulatory compliance.

6. DATA SHARING

does not sell your personal data. We only share information with third parties necessary for the provision of the service (Data Processors), who are obliged to comply with the GDPR:

  • Hosting and Cloud Providers: (e.g., AWS, Google Cloud, Firebase) to host the platform and databases.
  • Payment Gateway: Stripe (to process payments securely).
  • Analytics Tools: (e.g., Google Analytics, Plausible) to understand web traffic anonymously.
  • Authorities: If legally required by judicial or administrative authorities in Spain.

7. INTERNATIONAL TRANSFERS

Our main servers are located in the European Economic Area (EEA). If we use providers located outside the EEA (e.g., United States), we ensure they offer adequate guarantees, such as adherence to the EU-US Data Privacy Framework or the signing of Standard Contractual Clauses (SCC).

8. DATA RETENTION

  • Active Users: We will keep your data while you have an active account.
  • Unsubscribed Users: If you delete your account, your personal data and artworks will be removed from our active systems within a maximum of 30 days, except for those we must keep blocked due to legal obligations (e.g., invoices for 5 years under Spanish tax law).
  • Digital Preservation: If you opt for "Perpetual Preservation" plans or similar features, your public AR assets will remain accessible according to the contracted terms, minimizing associated personal data.

9. YOUR RIGHTS (GDPR)

As a user, you have the right to:

  • Access your data and know how we use it.
  • Rectify inaccurate data.
  • Delete your data ("Right to be forgotten").
  • Limit the processing of your data.
  • Portability of your data to another provider.
  • Object to the processing.

To exercise these rights, send an email to attaching a copy of your ID or equivalent identification document. You can also file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that we have not treated your data correctly.

10. COOKIE POLICY

This website and our WebAR experiences use cookies and similar technologies.

What are cookies?

They are small text files stored on your device.

Types of cookies we use:

  • Strictly Necessary: Essential for the website to function (e.g., keeping you logged in, Stripe security). They do not require consent.
  • Functional: Remember your preferences (language, editor settings).
  • Analytics/Performance: Help us count visits and traffic sources to improve performance (e.g., Google Analytics).
  • Marketing: May be set by our advertising partners to show you relevant ads on other sites.

Cookie Management

When entering , you will see a cookie banner where you can Accept, Reject (except necessary), or Configure your preferences. You can also block them from your browser, although some AR editor functions may fail.

11. MINORS

Our services are directed to users over 16 years of age (legal age for data consent in information society services according to GDPR, although in Spain it is 14, we maintain 16 for global safety). If we detect that a minor under this age has registered without parental consent, we will proceed to delete the account.

12. SECURITY

We implement technical and organizational measures (HTTPS encryption, hash passwords, access controls) to protect your data. However, no system is 100% invulnerable. By using our services, you acknowledge this inherent risk of the internet.

13. CHANGES TO THIS POLICY

We may update this policy to reflect legal or service changes. We will notify you of significant changes via email or a notice on the platform.

Contact: Bernat Navacerrada Torras C/ Manigua, 32, 3º 1ª, 08027 Barcelona, Spain