Privacy Policy

Last updated: November 16, 2026.

This policy describes how Sheru Bhai Photo ("we", "us") at sherubhaiphoto.pro handles information when you browse, sign in, upload photos, generate images, buy credits or contact support. Privacy contact: support@sherubhaiphoto.pro.

What we collect

• Account data — when you sign in with Google, we receive your email address, name, profile picture and Google account identifier. We use these to recognize your account and keep your credits and generations together. We do not receive your Google password.
• Photos you upload — the photo you submit for generation, plus its dimensions and file type.
• Generated images — the results produced for you, kept so you can re-view and download them.
• Orders and credits — pack purchases, order and payment references, amount, currency, payment status, payer email supplied by the payment provider, and credit transactions. Payment details are entered on the provider's page; we do not collect or store your full card number.
• Technical data — sign-in IP address, request and error logs, and the analytics data described below, used to operate the site, understand traffic and prevent abuse.
• Support communications — your email address, message and any attachments you choose to send. Please avoid sending sensitive information that is not needed for your request.

How your photos are used

The image-editing model used by this site is Nano Banana 2.1. When you submit a generation, we store your photo and send a copy, editing instructions and image dimensions to an external image-processing service that provides access to this model. That service uses temporary file links to retrieve inputs and deliver results. Your photo therefore leaves your browser and our own storage during processing.

We use your photos to fulfill your editing requests, save and deliver results, and resolve related technical or support issues. We do not use your photos to train our own models, advertise to you or populate a public gallery. This is not a guarantee about an external provider's independent retention or processing practices.

Copies kept by this site are stored in private storage and served through account access checks. Other users cannot browse your uploads or results. Temporary processing links are separate from your account access, so do not share them. No internet service can guarantee absolute security.

Content safety checks

We send input and generated images to a vision model through KIE for content checks before generation and before showing results. The current review model is Gemini 3.6 Flash. Waffo Prompt Sift checks the service's fixed generation instructions; Waffo does not receive your photo through that text-checking endpoint. We privately store review decisions, policy versions, timestamps and service reference identifiers to investigate abuse and review mistakes. Safety checks are automated and may be inaccurate. Contact support to request review or exercise the rights described below.

Processing purposes

We use account, photo, result and transaction data to provide the service you request; technical data to secure and maintain it; support messages to answer you; and order records to handle accounting, refunds and disputes. Where data-protection law requires a legal basis, these purposes rely on performing our contract with you, applicable legal obligations, or legitimate interests in security and service administration. Where consent is required, it must be obtained and may be withdrawn; these terms do not replace any required consent.

Storage and retention

• Generation history and files: tasks become eligible for scheduled cleanup 90 days after creation. Cleanup runs periodically, rather than at an exact time. A source photo reused for a newer generation is retained while that newer task still needs it. Download results you want to keep before the retention period ends.
• Uploads without a generation: these are not covered by the task-based cleanup. Email us to request their deletion.
• Account data: retained while your account is active or needed to provide the service. You can request account deletion by email.
• Orders and credit records: retained as needed for accounting, fraud prevention, refunds, disputes and legal obligations, including after account deletion where necessary.
• Logs and support messages: retained as needed to investigate requests, maintain security and resolve disputes. Duration depends on the purpose and the infrastructure or email service involved.
• External processing copies: deleting a file from this site does not itself delete copies or logs held by external processors; their retention schedules and applicable obligations also apply. We do not promise that every processing copy disappears at the site's 90-day cleanup date.

For deletion requests, email us from your account address. We may need to verify your identity before removing account-linked data and will explain any information that must be retained.

Sharing

• Image processing: an external processing service receives the photo and editing instructions needed to generate your result using Nano Banana 2.1. The model name identifies the technology, not a direct account or contractual relationship between you and its developer.
• Sign-in (Google): authenticates your account and supplies the profile information described above.
• Payments (the provider shown at checkout, including PayPal or Waffo Pancake): receives pack descriptions, amounts, currency, order references, account identifiers needed to match your purchase, buyer email and checkout return URLs. The provider collects payment information directly and returns payment identifiers, status and payer information needed to fulfill and reconcile your order. Its own privacy policy also applies.
• Content checks (KIE and Waffo): KIE receives images for the automated safety review described above. Waffo Prompt Sift receives the service's fixed text instructions for content screening.
• Hosting, storage and database services (Vercel, Cloudflare, Neon): process the data needed to host the site and store files, accounts, generations and transactions.
• Analytics (PVUV.ai): receives the public-page analytics information described below.
• Email services: handle messages you send to support and our replies.
• We may disclose information where legally required or necessary to protect users and the service. We do not sell your personal data or share photos with advertisers.

These services may process data outside your country. Applicable data-protection requirements and transfer safeguards depend on the service and the locations involved. Contact us for information about processing relevant to your request.

Cookies

We use session cookies needed to keep you signed in. We also use PVUV.ai for traffic analytics on public pages. PVUV uses first-party cookies and browser storage to distinguish visitors and sessions, including a visitor identifier that may persist for up to 396 days. We do not use advertising cookies. You can clear or block cookies and site storage in your browser; blocking necessary session cookies may prevent sign-in.

Traffic analytics

PVUV receives public-page paths, filtered campaign (UTM) parameters, referring domains, pseudonymous visitor/session identifiers, browser and device information, engagement measurements and traffic-quality signals. Its collection endpoint also receives your IP address to process requests and assess traffic quality. See PVUV.ai's Privacy Policy for its processing practices.

Analytics currently starts on supported public pages without an in-site consent choice. This notice describes that behavior; it does not treat visiting the site as consent to non-essential cookies where consent is legally required.

Our integration removes other URL parameters and fragments and excludes account, authentication, API and administration pages. We do not send your photos, generated-image links, email address, account identifier, order details or form contents to PVUV. Automatic download and exit-intent events and detailed interaction sensors are disabled.

Server-side crawler reporting is currently disabled. Browser analytics depends on JavaScript and does not capture every crawler request.

Your rights

Depending on your location, you may have rights to access, correct, delete or receive a copy of your data, restrict or object to processing, withdraw consent where applicable, and complain to your local data-protection authority. These rights may have legal exceptions.

Email support@sherubhaiphoto.pro from your account address to make a request. We may verify your identity and will respond within the time required by applicable law. Withdrawing consent does not affect processing already lawfully completed.

Children

The service is for adults aged 18 or over. Only upload photos of yourself or another adult who has explicitly agreed to this use. Contact support if you believe a child's information has been submitted.

Changes to this policy

We will post changes here and update the date above. Where applicable law requires additional notice or consent, we will provide it.