Privacy policy
Last updated 29 October 2026
What Commicorn collects, why, who processes it for us, and what you can ask us to do with it.
1Who we are
Commicorn is the business that runs the website and the app. For anything about your data, write to info@commicorn.com.
2What we collect
- Your account: your email address, your name if you give it, and what we need to sign you in.
- Messages you send us: your name, email address and message when you write to us from our contact page, kept in our inbox so we can reply.
- Your photos: the product photos you upload.
- Your product details: names, categories, features, materials, sizes and anything else you type about a product.
- Your brand settings: colours, fonts, logo and voice.
- What we make: images, listing copy and keyword research, kept so you can come back to a product.
- Usage and billing: your plan, the credits you spend and what on, and your payments, which Stripe processes for us.
- Technical data: the cookies that keep you logged in, and basic access logs (such as IP address and browser) that our hosting keeps to run and protect the service.
3Why we use it
- To provide Commicorn: making your images and copy, and keeping your listings. This is what you signed up for.
- To run your account and billing, including what the law requires us to keep.
- To keep the service secure and to find and fix faults.
- To understand how Commicorn is used, so we can improve it.
- To write to you about your account and about changes that affect you. We do not send marketing email without your permission.
4Who processes it for us
Commicorn is built on other companies’ services. Each processes data to do its part of the work for us:
- Supabase: logging in, our database, and storage for your photos and the images we make.
- Vercel: hosting the website and the app.
- fal.ai: making images; your photos are sent to build scenes and edits from them.
- Photoroom: cutting your product out and placing it into scenes.
- Anthropic: reading your photos and labels, writing your copy, and checking keywords against your details.
- DataForSEO: search figures for phrases about your product; it receives search phrases, not your personal details.
- Stripe: payments and invoices: we give Stripe your email address, and your name, card details, billing address and any business tax number you give at checkout go to Stripe and never reach our servers.
- PostHog: counting page views and how the app is used, and recording errors so we can fix them; it sets no cookies, and activity while you are logged in is linked to your account number, never your email.
- Cloudflare: checking that a person, not a program, fills in our sign-up, log-in and contact forms; it sees your IP address and details of your browser.
- Resend: sending the emails that sign you in, and each message you send from our contact page, with the name, email address and message you give.
5What we never do
We do not sell your personal data. We do not use your photos, details or listings for advertising, and we do not use them to train AI models.
6Where it is processed
Our providers run their services in the United States and other countries, so your data may be processed outside the country you live in.
7How long we keep it
Your data stays while your account is open, so your listings are there when you come back. If you close your account, we delete your photos, products and everything we made for you within 30 days. We keep billing records for as long as the law requires.
8Your choices and rights
You can see, correct, download or delete your data. Most of it you can change yourself in the app. For anything else, or to close your account, write to info@commicorn.com from your account email and we will answer within 30 days.
Where data protection law gives you further rights, such as objecting to how we use your data or complaining to a regulator, you can use them.
9Keeping it safe
Data travels encrypted between your browser, our servers and our providers. Each account can reach only the records that belong to it, and the database itself enforces that. Card numbers never reach our servers.
11Children
Commicorn is for businesses and is not meant for anyone under 18.
12Changes to this policy
If we change how we use your data, we will update this page and tell you by email before the change affects you.