In short
Number plates are blurred on your device before upload. Your photos are used only to make your previews, are never used to train AI and are deleted within 72 hours. We don't sell personal data. You can access or delete your data at any time, and you can complain to the ICO.
01Who is responsible for your data
STEE FREE LTD operates Tintora and is the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us about privacy at support@steefree.shop or +44 7586610988. Company details are on our Legal Information page.
02What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email address, hashed password or sign-in link records, plan, account settings | You |
| Billing | Plan, payment status, billing dates, last four card digits and card type, country for tax | Our payment provider |
| Vehicle photos | The photo you upload, after the number plate has been blurred on your device | You |
| Previews | AI-generated images, chosen finish and colour, time created | Created by the Service |
| Usage and device | IP address, browser type, pages visited, errors, preview counts | Your device |
| Support | Messages you send us and our replies | You |
| Consent records | Cookie choices, subscription confirmations and when you gave them | You |
03Number plates and people in photos
A number plate can identify a vehicle keeper, so Tintora detects plates and blurs them in your browser before upload. You check and adjust the blur yourself; the unblurred photo never leaves your device.
Tintora is designed for photos of vehicles. Please crop out people. We do not use facial recognition and we do not try to identify anyone in a photo.
04How we use data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Creating previews from your photo and delivering them to you | Contract |
| Running your account, subscription, renewal reminders and receipts | Contract; legal obligation for tax records |
| Preventing fraud, abuse and breaches of our Acceptable Use Policy | Legitimate interests (keeping the Service safe) |
| Fixing errors and understanding which features are used, in aggregate | Legitimate interests |
| Analytics cookies | Consent, which you can withdraw at any time |
| Product news emails (only if you opt in) | Consent |
05AI processing and training
To create a preview, your plate-blurred photo and a fixed instruction describing the finish and colour are sent to an AI image model provider that processes them on our behalf. The provider acts as our processor and may only use the data to return your preview.
We never use your photos or previews to train AI models, and we do not permit our processors to do so. We do not make decisions about you that have legal or similarly significant effects using automated means.
07How long we keep data
| Data | Retention |
|---|---|
| Uploaded photos and processing copies | Deleted automatically within 72 hours |
| Previews on paid plans | Kept in your account history for 30 days, or until you delete them |
| Previews on the Free plan | Not kept in a history; available in your browser until you leave the page |
| Account data | Until you close your account, then deleted within 30 days |
| Billing and tax records | 6 years after the end of the financial year, as required by UK law |
| Security and server logs | 90 days |
| Support messages | 2 years after the conversation ends |
08International transfers
Some of our providers process data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for details.
09Your rights
You have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing already carried out.
Email support@steefree.shop to use these rights. We respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to help first.
Residents of the EU and US states
If you live in the European Economic Area you have equivalent rights under the EU GDPR and may complain to your local supervisory authority. If you live in a US state with a consumer privacy law, such as California, you may request access to or deletion of your personal information and opt out of sale or sharing. We do not sell or share personal information, and we treat Global Privacy Control signals as an opt-out. We will not discriminate against you for using these rights.
10Security
We use encryption in transit (HTTPS), access controls, least-privilege access for staff and providers, and automatic deletion of uploads. No system is perfectly secure; if a breach affects your data and is likely to put your rights at risk, we will tell you and the ICO as the law requires.
11Children
Tintora is not intended for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.
13Changes to this policy
We will post any changes here and update the effective date. If a change materially affects how we use your data, we will email account holders before it takes effect.