Stockphoto.now privacy policy

TARGA LIMITED, the Hong Kong operator of Stockphoto.now, is responsible for the personal data practices described in this policy. This policy explains our account, AI, image, payment, report and affiliate data practices. Contact us through our Contact page for privacy requests.

Account and activity data we process

We process account email and authentication identifiers, password hashes, submitted images and metadata, comments and public member handles, favorites, download history, generation prompts, uploaded tool inputs, selected tool settings, job status and error information, subscription references, referral attribution, affiliate agreement versions and acceptance timestamps, commission records, private image reports, optional report contact emails, and moderation decisions. Payment-card information is handled by Stripe; we retain payment and subscription references needed to operate access and reconcile earnings, not full card numbers.

How we use account and activity data

We use information to provide accounts, image creation and downloads, moderation, quota enforcement, customer support, subscription billing, affiliate attribution, fraud prevention, financial reconciliation, and legal compliance. Depending on applicable law, these activities rely on contract performance, legitimate interests, legal obligations, or consent where required. Joining the affiliate program is optional.

Cookies and audience measurement

Session cookies keep you signed in and secure forms. A signed referral cookie records a qualifying creator image touch for up to 30 days; checkout retains the referral relationship for eligible renewals. Image view events use daily pseudonymous visitor identifiers to deduplicate traffic. View statistics, ranking, earnings, and download totals are updated in batches rather than live. Pseudonymous event processing is not anonymous in every legal sense. Browser storage may hold favorites and preferences.

Creator activity and referral statistics

Successful registrations, verified Premium trial starts and first eligible subscription payments can be attributed to a creator’s approved image referral link. We retain the referred account identifier, creator identifier, image reference, conversion type and event timestamp for attribution, fraud prevention and financial reconciliation. A creator’s private Earnings dashboard shows aggregated counts and image performance, not referred members’ email addresses or payment-card details. Each account counts once per conversion type. Historical conversions that were not recorded are unavailable.

Service providers and sharing

We share only information needed for a service with providers: Google for optional sign-in, Stripe for subscriptions and payment operations, and Wallpapers for requested AI image operations or Vision descriptions. User-uploaded images remain private until manual moderation approval. Image Generator creations are approved automatically and published on a scheduled refresh. Approved images, metadata, and posted comments are public. We do not publicly expose a commenter’s email. Affiliates receive attribution and payment information necessary to understand their earnings, without access to buyers’ payment-card details. We may disclose information when legally required or reasonably necessary to investigate abuse or protect rights.

Data retention and protection

Tool results normally expire after 24 hours. Detailed deduplicated view records are pruned after 31 days; aggregate statistics may remain. Account content and download history are retained while needed for the service. Payment, agreement, fraud, and commission records may be retained after account closure for reconciliation, disputes, tax, and legal obligations. We restrict private originals and member records and use access controls; no system is guaranteed completely secure. Providers may process information in other countries under applicable transfer safeguards.

Your choices and rights

You may choose Free access, decline affiliate participation, remove saves, cancel subscriptions, and contact us to request access, correction, deletion, or other rights available in your location. We may verify your identity and retain records where required or justified by outstanding payments, disputes, fraud prevention, or legal duties. Withdrawing optional participation does not automatically delete legally necessary transaction records. Cookie choices can affect referral attribution and account features. You may complain to your applicable privacy regulator.

Privacy policy changes

We may update this policy to reflect service or legal changes and will give appropriate notice of material changes. If a new use requires consent, we will obtain it before that use. This policy does not remove mandatory privacy rights.

Payout destination data and protection

If you request contributor payouts, we collect your selected method and its destination: PayPal email, USDT TRON or Bitcoin address, or bank account holder, address, bank country, bank name, account number or IBAN, SWIFT/BIC, and required routing details. These details are encrypted at rest, shown masked in your settings, and made available to authorized administrators for payout review. Each request retains an encrypted destination snapshot for reconciliation. Payment references and records may be retained for disputes, accounting, and legal requirements.

AI prompts, uploads and generated results

Requested AI features send your input and relevant settings to the configured service provider. Save successful results if you want to keep them beyond their normal 24-hour lifetime.

Information sent for requested AI features

When you use an AI tool or ask AI to fill upload details, the input image, prompt and relevant settings are processed by the configured AI service provider to return the requested output or description. Our current image operations use Wallpapers. Optional configured generation services may also use OpenAI. Providers may process inputs in other countries under their own applicable data terms. Do not submit confidential information, sensitive personal information or another person’s image without the necessary authority.

We do not promise that provider processing is anonymous, has zero retention or is excluded from all model training. Provider practices depend on the service and configuration. Contact us before submitting information that needs a particular retention or training restriction. Selecting an AI feature does not make private account saves public; publishing an approved contributor submission is a separate step.

File lifetime and account saves

Completed Image Generator creations are retained and automatically added to Explore / Gallery under the creator’s username on a scheduled refresh. Other unsaved tool results normally expire after 24 hours. Free and trial personal storage is limited to 500 images, with cleanup after 120 days without a view. Paid Premium has unlimited personal image storage with no inactivity expiry while paid access is active. When paid access ends, files receive at least 120 days before inactivity cleanup. Approved public contributor images and legally necessary payment records are managed separately. Deleting a save or folder does not automatically delete public content, download history or records we need for disputes and legal obligations.

Private reports and moderation records

The image Report form collects the image URL identifier and title, selected reason, your description and an optional contact email. If you are signed in, we associate the report with your account ID. Reports are not public and are available to authorized administrators for investigation. We record report status, private review notes, reviewer identity and review time.

We use these records to investigate technical faults, misleading content, rights claims and abuse, and to contact you when you supply an email. We may share relevant claim details where reasonably necessary to investigate, obtain a response or comply with law; we do not publish your contact email in the gallery. Report records may be retained while needed for unresolved claims, disputes, fraud prevention and legal obligations. You can request access, correction or deletion through Contact, subject to identity verification and lawful retention requirements.

Security logs and download enforcement

We process network and request information, including IP-derived identifiers, session identifiers and timestamps, for authentication, spam prevention, request limits and service security. Report spam controls use keyed hashes of IP addresses and account identifiers rather than storing raw IP addresses in the report limit table. These pseudonymous identifiers are not necessarily anonymous. Inactive report limit records older than seven days are removed when report submissions are processed. Operational access logs may separately contain IP addresses and requested URLs.

Daily download usage and paid credit records enforce your account allowance across devices. Each Free or trial file download, including each image in a ZIP, is counted separately. Paid unlock records distinguish repeat downloads within the same paid billing period and support creator allocation. Download history records downloads started by the server; it does not prove that your browser finished saving a file. Quota counters and retained history are account data, not public browsing profiles.

Browser storage and public content

Browser storage can hold your Download All list and preferences; account saves and folders are stored against your account. Clearing browser storage can remove a local selection without deleting account saves. Session and signed referral cookies support authentication and attribution. Limiting cookies can prevent sign-in or referral attribution. Approved contributor images, metadata and public creator identifiers are discoverable on the website and by search engines. Do not include personal information in public descriptions that you do not intend to publish.

Privacy questions and requests

Use our Contact page for privacy, account or data requests. Describe the relevant account and request without sending passwords, full card details or unnecessary identity documents. We may ask for enough information to verify the request and explain any records that must be retained. The account privacy guide explains the available account actions; it does not replace rights available under applicable law.

Hong Kong personal data protections

Where Hong Kong’s Personal Data (Privacy) Ordinance applies, we handle personal data in line with its collection, accuracy, retention, use, security, transparency, access and correction requirements. We collect data for the purposes described here, seek any required consent before an unrelated new use, and retain personal data no longer than necessary for those purposes and lawful obligations. Access and correction requests may be made through our Contact page; we may verify identity and explain any lawful refusal or required retention.

You may raise a privacy concern with Hong Kong’s Office of the Privacy Commissioner for Personal Data. This policy does not remove mandatory rights in another applicable jurisdiction. International service-provider processing remains subject to applicable data-protection requirements.

Image Generator creator attribution

Completed Image Generator results are automatically approved and associated with the account that requested them. Authorized administrators can see generated images and user uploads, their descriptive metadata, source, status and public creator username. Generated images may appear in the public library on a scheduled refresh with that username and metadata derived from the descriptive brief. User uploads remain private until manual approval. The library submission copy is separate from an unsaved tool result or privately saved account copy and is retained under our contributor and rights-record retention practices.

Email verification and support messages

We process your registered email address, verification timestamp, hashed verification token, expiry and resend records to confirm account ownership and prevent abuse. The raw token is not stored in the verification table; queued verification email bodies are encrypted. We use SMTP2GO to deliver verification emails and administrator support replies, sharing the recipient email address, subject and message content needed for delivery. Email delivery may involve processing outside Hong Kong, subject to applicable safeguards and law. We do not use these transactional emails for marketing without the necessary consent.

Contact messages contain your account ID, registered verified email, selected topic, subject, message, timestamps and status. Authorized administrators can read these requests and reply from the private admin inbox. We store replies, administrator IDs and email send status for support, reliability, abuse prevention and dispute handling. Support and delivery records are kept only as needed for those purposes or applicable legal obligations; you can request access or deletion through Contact, subject to lawful retention exceptions. Do not include passwords, payment card details or unnecessary sensitive data.