Privacy policy

Last updated November 2, 2026

Christmas AI Photos turns photos you upload into Christmas photos. Many of these are photos of families and children, so we keep as little as possible for as short a time as possible. This policy explains what we collect, why, and when it is deleted.

What we collect

Photos you upload and the images we create from them; your email address if you sign in (or your name, email and profile picture if you use Google sign-in); your credit balance and order history; and basic technical data such as IP address, browser type and a device cookie, which we use to prevent abuse of the free photo and to keep the service secure. We do not collect payment card details: payments are handled entirely by Stripe.

Who processes it

We use a small number of service providers, only to run this service: Cloudflare (hosting, storage, security, email delivery), Stripe (payments), Google (only if you choose Google sign-in), and our AI image provider, which processes your photo to create your picture (currently OpenAI's GPT Image model, reached through the 1route.dev API service, and for videos the MiniMax H3 model run on RunningHub). OpenAI states that it does not train its models on data sent through its API by default. We never sell your data, never use your photos to train our own or anyone else's models, and never publish your photos or results.

How long we keep it

Uploaded photos are deleted automatically within 48 hours. Generated images are kept for 14 days so you can download them again, then deleted automatically. Our AI provider deletes its copy of results within about 24 hours. Your account (email and credit balance) is kept until you ask us to delete it. Order records are kept as long as tax and accounting rules require.

Cookies

We use first-party cookies only: one keeps you signed in, one identifies your device so the free photo can be given once per device, and one remembers how you found us (for example a search or a link). We do not use advertising cookies or sell data to advertisers.

Your choices

You can ask us at any time for a copy of your data, to correct it, or to delete your account and everything stored with it; email us and we will do it within 30 days (photos are already deleted automatically as described above). This service is meant for adults. Children under 13 may not use it themselves; parents and guardians may upload photos of their own children. Only upload photos of people who agreed to it, or of children you are the parent or guardian of.

Questions? Email support@christmasaiphotos.com.