slikaj.hr GUIDED · AI STUDIO
Try for free ↵

Legal

Privacy policy

Last updated: 5 May 2026.

This policy describes what data we collect, why we process it, and how you can exercise your rights under the General Data Protection Regulation (GDPR) and Croatian implementing legislation.

Controller

Tomislav Lazar, VAT ID to be filed upon company registration. Email: [email protected].

What data we process

On signup: email address, name, password hash. On usage: the text you submit to the wizard, the generated images, generation metadata (timestamp, resolution, model cost). On purchase: Stripe Customer ID and transaction ID. Card numbers never touch our servers.

Purpose and legal basis

Providing image generation (contract performance). Subscription and add-on billing (contract performance). Security monitoring and abuse prevention (legitimate interest). Account-related email notifications (legal obligation and contract performance).

Third-party processors

  • Stripe (Ireland): billing, GDPR-compliant Data Processing Addendum.
  • Google Gemini API (Ireland / USA): image and SEO copy generation. Your prompts and generated images are not used by Google for model training.
  • AWS S3 + CloudFront (Frankfurt, eu-central-1): generated image storage.
  • Plausible Analytics (Germany): aggregated visit metrics, no cookies.

Retention

Account and its generations: while the account is active, plus 12 months after deletion for tax and legal obligations. Stripe transactions: 11 years (Croatian Income Tax Act). You can delete generated images at any time from the dashboard.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection. Send a request to [email protected]. We respond within 30 days. You may also file a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.

Cookies and tracking

We use only strictly necessary cookies for login and CSRF protection. Plausible Analytics runs without cookies. Third parties listed above may use their own cookies only within their own surfaces (e.g. Stripe Checkout).