Privacy Policy.

The data controller is Reica, an AI-powered visual production platform based in Italy (European Union). For any privacy-related requests, contact us at hello@getreica.com.

We collect the following categories of personal data:

• Contact form data: name, email address, company name, subject, and message content.
• Account data: email, name, and password hash (if you register directly) or OAuth profile data (if you sign in via Google).
• Usage data: IP address, browser type, pages visited, time spent, and referring URL, collected through analytics tools.
• Technical data: session tokens and preferences stored in cookies or local storage.
• Content provenance records: for each image generated on the Platform, a technical record of how it was made (processing steps, tools used, where and when they ran), linked to your account through the image. It contains no prompts and no image content.

We do not collect sensitive categories of personal data (e.g. health data, political opinions, or biometric data).

• Contact form messages: retained for up to 24 months, then permanently deleted.
• Account data: retained for the duration of the account and deleted within 90 days of account closure upon request.
• Analytics data: aggregated and retained for up to 26 months.
• Content provenance records: retained for as long as the image they describe, and deleted with your account.

We do not sell your personal data. We may share data with trusted third-party processors who act on our behalf under appropriate Data Processing Agreements (DPA):

• Cloud infrastructure providers.
• AI processing providers that run the generative and image-processing models. Processing runs in the EU first; when EU capacity is unavailable, some steps (for example image segmentation, or image generation on a global endpoint) may run in the United States or Canada.
• Analytics providers (data processed under Standard Contractual Clauses where applicable).
• Customer support tools.

Any transfers outside the EU/EEA are governed by appropriate safeguards (Standard Contractual Clauses — SCCs, or adequacy decisions) in compliance with Chapter V GDPR.

We use strictly necessary cookies (required for site operation) and, with your consent, analytics and marketing cookies. You can manage your preferences at any time via our Cookie Policy.

Under the GDPR, you have the following rights:

• Right of access (Art. 15) — request a copy of your personal data.
• Right to rectification (Art. 16) — correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18) — limit how we process your data.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interest.
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, email hello@getreica.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration, in accordance with Art. 32 GDPR. No transmission over the internet is 100% secure; however, we continuously review and improve our security practices.

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately at hello@getreica.com.

We may update this Privacy Policy periodically. Material changes will be communicated via email (if you have an account) or via a notice on our website. The date at the top of this page always reflects the latest revision.

For any question about this Privacy Policy or to exercise your rights, contact us at: hello@getreica.com