Privacy policy

Softbox is operated by [TBC — registered business name] (“Codinative”, “we”), registered at [TBC — registered address], Pakistan. For anything in this policy, write to info@codinative.com.

Your account. Your email address, your display name, and — if you sign in with Google or through a store platform — the profile picture and name that provider gives us. If you sign up with a password, we never see it: it is held by Google Firebase Authentication and we receive only a yes or no when you sign in.

Your store connection. The access token you create for your store, encrypted before it is stored, plus your store’s name and identifier so we can show you which store is connected.

Your products and images. The product names, descriptions, prices and photographs we read from your store in order to generate new photographs, and the images Softbox produces for you.

Your usage. What each generation cost in tokens, when it ran and whether it succeeded. This is how your balance is calculated and how we can tell you where your tokens went.

We do not collect payment card details. Card data goes directly to Stripe and never reaches our servers.

To run the service you asked for: to show your catalogue, generate photographs, publish them back to your store, meter what you have used, bill you correctly, and contact you about your account. We do not profile you, sell your data, or use it for advertising.

Your product photographs and the images Softbox generates belong to you. We do not use them to train any model of ours, and we do not licence them to anyone else.

Generation runs on Google Cloud Vertex AI. Google processes the images as our processor in order to return a result, under terms that do not permit using them to train Google’s own models.

Google Cloud and Firebase — authentication, database, image storage and generation. Stripe, through our payment service — subscriptions and invoices. Brevo — the account emails we send you. Your own store platform — BigCommerce, Shopify or whichever you connect, which receives the photographs you choose to publish.

Each is a processor acting on our instructions, not a party we sell data to. Some of them operate outside Pakistan, so your information may be processed abroad under the safeguards those providers offer.

Your account and its content stay until you delete them. Deleting your account from Account → Delete account removes your profile, your models, your backgrounds, your store connection and every image Softbox generated for you. That cannot be undone.

Records we are required to keep for accounting — invoices and payment records — are held by Stripe and our payment service for as long as the law requires, after your account is gone.

Photographs you have already published to your own store are yours and stay there; they are outside our reach once published.

You can ask for a copy of what we hold, correct it, or have it deleted. Most of it you can do yourself in the app: your name and email in Account, your images in Models, Backgrounds and Shoots, and everything at once by deleting the account. For anything else, write to info@codinative.com and we will answer within 30 days.

Softbox sets one cookie, which keeps you signed in. There is no advertising cookie and no third-party analytics tracker on the app or this site, which is why you have not been asked to accept anything.

Softbox is a tool for businesses and is not intended for anyone under 18. We do not knowingly collect information from children.

If this policy changes in a way that affects you, we will email the address on your account before the change takes effect. The date at the top always says when it last changed.