Privacy Policy

Last updated: 3 April 2026

This Privacy Policy explains how LMF SAS ("we", "us", "our"), the operator of SelectiveFill, collects, processes, and protects your personal data when you use the SelectiveFill service.

Data Controller: LMF SAS, SIREN 838 953 479, based in Paris, France. SelectiveFill acts as an independent data controller for account management, billing, security, and service operation. For user content processing (image generation), SelectiveFill may act as a controller or joint controller depending on context, as it determines preprocessing methods, provider routing, and retention policies.
Contact: privacy@selectivefill.com

1. What Data We Collect

Account data: name, email address, and authentication credentials (via Google OAuth). Payment information is processed by Stripe and is not stored on our servers.

Usage data: job IDs, timestamps, model used, credit transactions, IP address, and plugin version.

Content data: source images, reference images, and text prompts that you submit for generation, and the resulting output images.

2. How We Use Your Data

We process your data for the following purposes:

  1. To provide the Service (legal basis: contract performance): processing your generation requests, managing your account, handling billing and credits.
  2. To maintain security and prevent abuse (legal basis: legitimate interest): logging requests, detecting policy violations, preventing fraud.
  3. To comply with legal obligations (legal basis: legal obligation): responding to lawful requests from authorities, maintaining records as required by French law.

3. Sub-processors and Data Sharing

When you submit a generation request, your content data (source images, reference images, prompts) is transmitted to our servers. Reference images may be preprocessed on our servers (for example, cropping, resizing, and format conversion) before being forwarded to the following third-party AI model providers for processing:

Provider Data Received Retention Training Use
Google (Gemini API, Paid Services) Images, prompts, outputs Logged for limited period for abuse monitoring Not used to train or improve Google products
Freepik Images, prompts Per Freepik API terms Per Freepik terms
Recraft Images, prompts, outputs Short retention per published documentation Not used for model training per published terms

Other service providers:

Provider Purpose Data Shared
Stripe Payment processing Email, payment method, transaction data
Resend Transactional email Email address, message content
Google (OAuth) Authentication Email address, name
HostHatch Infrastructure hosting All data processed on our servers is hosted here

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our sub-processors operate. These transfers are protected by:

  1. the European Commission's Standard Contractual Clauses (SCCs), incorporated into our agreements with sub-processors;
  2. adequacy decisions where applicable;
  3. the sub-processor's own Data Processing Addendum and GDPR compliance commitments.

5. Data Retention

Account data: retained for the duration of your account and for 3 years after account closure (as required by French commercial law).

Content data (images and prompts): retained on our servers only for the duration necessary to process your generation request. Images are not stored long-term on our servers after the result is delivered to you. Sub-processor retention periods are described in section 3 above.

Usage data and logs: retained for up to 12 months for security and abuse prevention purposes.

Billing data: retained by Stripe in accordance with Stripe's privacy policy and applicable financial record-keeping requirements.

6. Your Rights

Under the GDPR, you have the right to:

  1. Access your personal data;
  2. Rectify inaccurate personal data;
  3. Erase your personal data (right to be forgotten);
  4. Restrict processing of your personal data;
  5. Data portability (receive your data in a structured, machine-readable format);
  6. Object to processing based on legitimate interest;
  7. Withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact us at privacy@selectivefill.com. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL) or the supervisory authority of your country of residence.

7. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

8. Children

The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16.

9. Images Containing Personal Data

If you upload images containing identifiable individuals, you are responsible for having obtained any necessary consent from those individuals. We process such images solely to provide the Service and do not use them for any other purpose. We do not perform facial recognition or biometric analysis on uploaded images.

10. Changes to This Policy

We will notify you of material changes to this policy by email or through the Service. The updated policy will be posted at selectivefill.com/privacy with the revision date.