Skip to main content

Privacy Policy

Last updated: October 15, 2026

The Japanese version is authoritative

This translation is provided for reference only. If there is any difference between this translation and the Japanese version, the Japanese version prevails.

1. Information we collect

  • Email address (for login and order notifications)
  • The original photos you upload and the finished photos created from them
  • Order details, payment status and the content of your messages to us
  • Page views and progress through the purchase steps (usage data in a form that does not identify individuals)

Payment information such as card numbers is handled by the payment company (Stripe); Meishot does not store it.

2. How we use photos

Original photos and finished photos are used only to create the photos for your order, for regeneration, and to respond to your messages. We do not use them as examples or in advertising. If we wish to publish them as examples, we will obtain separate permission from you.

Additional information contained in original photos, such as location data, is removed when we receive them.

3. Sending data to external services

To create photos, we send your original photos to OpenAI’s image generation API. We use Supabase to store photos and order records, Stripe for payments, and Resend to send emails.

Handling by the image generation service
Photos sent to OpenAI’s image generation API are used only to create your photos. Under the terms that company has published, the data sent is not used to train its models and is retained for up to 30 days to monitor for abuse. If a problem is found in a safety check, it may be retained longer for review (based on information published as of October 14, 2026).
Usage analytics
To understand how the site is used and improve it, we use Google Analytics (Google LLC). When you open a page, identifiers such as cookies, the URL of the page you viewed (without query parameters), the referring page, your device and browser type, and your approximate region are sent to Google. We do not send your email address, photos, or order details. Google handles this data under the Google Privacy Policy. For visitors from regions where consent is required, such as the EU, nothing is sent until you agree. You can withdraw your consent at any time from “Cookie settings” at the bottom of the page. You can stop this by disabling cookies in your browser settings or by using the Google Analytics opt-out add-on.

4. Storage periods

  • Finished photos: 30 days after completion
  • Original photos: 7 days after completion (while a regeneration is being created, until it is complete)
  • Original photos before payment: 24 hours after your last action
  • Payment records: the period required by law
Backup storage period
Databases, including order records, are backed up daily and each backup is kept for 7 days. Photo files are not included in backups.

5. Deletion

You can delete original photos and finished photos from the order page at any time during the storage period. If you close your account from Account, the photos for all your orders are deleted.

When you delete, the photos in our storage are deleted in turn. Because there is no way to request deletion from the image generation service, any data held there is deleted according to the retention period above. The same applies to records remaining in database backups, and we cannot promise that everything will be erased immediately.

6. Viewing by our staff

Authorized staff may view photos to respond to messages or problems. In that case, we record the reason and the staff member.

7. Contact

Please reach us through Contact.

Business name
HAVU LLC.
Contact
hello@havu.cc