Privacy Policy

This Policy explains which personal data of limeshot users (the limeshot.app website and the Telegram app) we process, why, and how we protect it, in line with Russian Federal Law No. 152-FZ «On Personal Data». The operator is the person named under «Details» at the bottom of this page. The Russian version prevails.

1. What we process

• Account: e-mail address, password (stored only as a hash), registration date.
• Materials: photos and other files you upload, prompts and generation results. Photo metadata (EXIF, including location) is removed on upload.
• Transactions: history of credits, generations and payments. Card data is processed by the payment service; we neither receive nor store it.
• Technical data: IP address, browser and device details, session cookies.

2. Why

• registration, sign-in and running your account;
• performing generations and storing results;
• keeping track of credits and accepting payments;
• answering requests and sending service messages (e.g. confirmation codes);
• protecting the Service from abuse and complying with the law.

3. Legal grounds

We process data based on your consent, to perform the Terms of Service and to meet legal obligations.

4. Who we share it with

Only those the Service cannot work without, and only as much as needed:

• neural network model providers — uploaded files and prompts to perform a generation. Some providers are outside Russia; this is a cross-border transfer, which you consent to separately;
• payment services — data needed to process a payment;
• hosting and e-mail delivery providers — to store data and deliver e-mails;
• public authorities — where required by law.

We do not sell personal data and do not use your materials for advertising without your permission.

5. Retention

Data is kept while your account exists. To delete your account and all data, write to the e-mail on the Contacts page: we delete it within 30 days, except records the law requires us to keep longer (e.g. payments).

6. Cookies

We only use necessary cookies: for signing in and running the site. There are no third-party advertising or analytics cookies.

7. Your rights

You may request information about how your data is processed, ask for it to be corrected or deleted, and withdraw your consent. Send requests to the e-mail on the Contacts page — we reply within 10 business days.

8. Security

Access to data is restricted, connections are protected with HTTPS, passwords are stored as hashes, and staff access to data is logged.

9. Changes

We may update this Policy; a new version applies from its publication on this page.