Privacy Policy

1. Introduction

Setset AI Labs Inc. ("Setset," "we," "our," or "us") provides AI-powered tools for product and lifestyle imagery. We value your privacy and are committed to protecting your data. By using setset.ai, you agree to this Privacy Policy.

2. Information We Collect

Account Data: Name, email, organization, and authentication credentials.
Billing Data: Payment tokens, transaction IDs, last 4 digits of card (handled by our payment processor; see §6).
Usage Data: Uploaded and generated images/videos, preferences, and logs.
Product Analytics: Events such as page views, feature usage, clicks, and tool interactions, linked to your account and organization to help us measure and improve the Service.
Error & Performance Data: Crash reports, error traces, performance metrics, and limited session replays used for debugging and reliability. IP addresses are removed from user context where feasible.
Technical Data: IP, device, browser, timestamps, error logs.
Visitor Identification Data: On our public website, we use third-party services to identify business visitors based on IP address and publicly available information (e.g., company name, business email).
Likeness Data: Setset processes facial or likeness data only for your requests. We do not use it for identification or to train our own models without consent. Where requests are routed to third-party AI providers (see §6), those providers apply their own data-handling terms.

3. How We Use Data

We use data to provide and improve the Service, process payments and credits, detect abuse or fraud, comply with law, and communicate updates. Legal bases (EU/UK): Contract, legitimate interests, consent, legal obligation.

4. Marketing Communications

With your consent, we may send product updates, tips, and news about AI for product photography. We use a third-party email platform (listed in §6) to deliver these communications. Marketing emails may contain tracking pixels and tracked links to measure engagement (opens and clicks). You can unsubscribe at any time via the link in any marketing email or by contacting privacy@setset.ai. Unsubscribing from marketing emails does not affect transactional emails (e.g., billing receipts, security alerts).

5. Storage & Security

Data is stored with our infrastructure providers (listed in §6) with encryption at rest and TLS in transit. We maintain access controls and monitoring but cannot guarantee absolute security.

6. Sharing & Subprocessors

Clerk (Authentication), Stripe (Payments), Supabase (Cloud database and storage), FAL.ai (AI processing), Google (AI processing), OpenAI (AI processing), Trigger.dev (Background processing), PostHog (Product analytics), Sentry (Error and performance monitoring), Loops (Email communications), and on our public website only, LinkedIn Insight Tag (Advertising measurement and retargeting), RB2B and Retention.com (Visitor identification for non-EU traffic). Transfers comply with GDPR SCCs. We never sell data.

7. Your Content

You retain the rights you have in the inputs you upload. Setset does not claim ownership of your outputs. We process your content to provide the Service, and you can delete it at any time. We do not train our own models on your content without your consent. Third-party AI providers we route through to generate outputs (listed in §6) apply their own data-handling terms, which may differ from ours. See the Terms of Service for full details.

8. Your Rights

Request access, correction, deletion, portability, or opt-out by emailing privacy@setset.ai. Responses: 30 days (EU/UK), 45 days (US).

9. Retention

We keep personal data while the account is active + 90 days. Backups: 35 days.

10. Cookies

We use essential cookies for site functionality and third-party cookies and similar technologies for product analytics, error monitoring and session replay, visitor identification, and advertising measurement and retargeting on our public website. These third parties may set identifiers to measure feature usage, diagnose issues, attribute marketing campaigns, and improve the Service. The specific vendors we use are listed in §6. Manage preferences via your browser settings.

For visitors outside the EU, EEA, and UK, when you visit or log in to our public website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. Visitors in the EU, EEA, and UK are excluded from this processing unless they have accepted non-essential cookies via our consent banner. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.

11. International Transfers

Data processed in the US/EU with contractual safeguards.

12. Children

The Service is not intended for and may not be used by anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@setset.ai and we will delete it.

13. Updates

We'll notify you of changes via email or in-app. Effective date reflects the latest version.