Plateable

Privacy Policy

Last updated: May 1, 2025

1. Overview

Plateable ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your personal data. By using our Service, you agree to the collection and use of information in accordance with this Policy.

2. Information We Collect

Account information:

  • Email address and name when you register
  • Password (stored as a cryptographic hash — we never store your plain-text password)
  • Account type (restaurant, agency, or direct)

Usage and content data:

  • Photos you upload for enhancement
  • Enhanced photos generated by our AI
  • Credit usage history and transaction records
  • Enhancement history and timestamps

Payment information:

  • Billing details are processed and stored by Stripe — we do not store card numbers
  • We store your Stripe customer ID and subscription status

Communications:

  • Messages sent via our contact form
  • Email address for waitlist sign-ups

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To process payments and manage subscriptions
  • To send transactional emails (receipts, account alerts)
  • To respond to support requests and contact form submissions
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

We do not sell your personal data. We do not use your uploaded photos to train our AI models.

4. Third-Party Services

We use the following third-party services to operate Plateable. Each has its own privacy policy:

  • Stripe — Payment processing. Stripe stores your payment method, billing details, and transaction history. See stripe.com/privacy.
  • UploadThing — File storage for uploaded and enhanced photos. Your images are stored on UploadThing's infrastructure. See their privacy policy at uploadthing.com/privacy-policy.
  • fal.ai — AI processing service that enhances your photos. Uploaded images are transmitted to fal.ai's servers for processing. See their privacy policy at fal.ai/privacy.
  • Neon — Database hosting for account and usage data.

5. Data Retention

We retain your account data for as long as your account is active. Enhanced photos are stored for as long as your account exists to power your history view. If you delete your account, your personal data is deleted within 30 days. We may retain anonymized usage statistics indefinitely.

6. Data Security

We use industry-standard security practices including encryption in transit (HTTPS/TLS), cryptographic password hashing, and access controls. While we take reasonable measures to protect your data, no system is completely secure. We encourage you to use a strong, unique password for your account.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your data in a portable format
  • Opt-out: Opt out of any marketing communications at any time

To exercise these rights, contact us.

8. GDPR (European Users)

If you are in the European Economic Area, our legal basis for processing your data is performance of a contract (providing the Service), legitimate interests (fraud prevention, service improvement), and consent where required. You have the right to lodge a complaint with your local data protection authority.

9. CCPA (California Users)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To submit a request, contact us.

10. Cookies

We use a single session cookie to keep you signed in. We do not use third-party tracking cookies or advertising pixels. No personal data is transmitted to ad networks.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service. Continued use after changes are posted constitutes acceptance.

13. Contact

For privacy questions or to exercise your rights, use our Contact page.