Privacy Policy

Last updated: October 15, 2026

Who we are

Small Pics LLC provides an API and delivery layer that optimizes and serves images for commercial websites and apps. This notice explains what we collect, why we collect it, and how we handle it for professional and business users.

Small Pics is a B2B service. We do not offer services for personal or household use.

How this policy relates to our Terms

This policy works together with our Terms of Service. If a term is not defined here, it has the meaning given in the Terms.

Information we collect

Information you provide

• Account data: your name, email, password (stored hashed), optional company name, and the subscription and transaction records we receive from Paddle. Paddle collects your payment details as Merchant of Record.
• Support messages and feedback you choose to send us.
• Images Small Pics fetches from the sources you configure, and the cached and transformed copies made from them.

Information we collect automatically

• Request and event logs including IP address, user agent, referrer, timestamps, status codes, and latency.
• Device and network signals like browser family, OS version, and limited identifiers.
• Cookies and similar technologies to keep you signed in to the dashboard and to measure visits to our website.

How we use information

• Operate, secure, and improve the Service.
• Measure performance, plan capacity, and control costs.
• Prevent, detect, and investigate abuse and outages.
• Provide customer support and communicate about the Service.
• Comply with legal obligations and enforce our Terms.
• Create aggregated and de-identified statistics to improve the platform.

GDPR and roles

For images and associated personal data that you process through the Service, you act as the controller. Small Pics acts as a processor on your documented instructions. For your account data and the billing records we receive from Paddle, we act as an independent controller. Paddle handles payment details under its own privacy notice.

We can provide a Data Processing Addendum on request. Contact support@example.smallpics.io.

Legal bases for processing

Where required by law, we rely on one or more of the following bases: performance of a contract, our legitimate interests in running and improving the Service, compliance with legal obligations, and your consent where applicable.

Sharing

• Vendors that provide hosting, storage, delivery, payments, email, error monitoring, and analytics.
• Disclosures required by law or to protect rights, safety, and the Service.
• Business transfers such as a merger, acquisition, or financing.
• With your direction or consent.

We may share aggregated or de-identified data that does not identify you.

International transfers

We process data in the United States and other locations where our processors operate. For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and their UK addendum where applicable.

We have not appointed an EU representative and the Service is not targeted at consumers in the EU.

Security

We apply administrative, technical, and physical safeguards aligned to industry practice. No online service is perfectly secure, so residual risk remains.

Retention

• Account and billing records are retained while your account is active and as required by law.
• Operational logs are kept for limited periods for reliability, debugging, and security.
• Cached assets may persist according to cache controls and network behavior.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, to portability, and to lodge a complaint with a supervisory authority. Because we are a B2B provider, these rights typically apply to professional contact data. To exercise a right, email support@example.smallpics.io.

Your choices

Account changes and deletion

Update your name, email, password, and account details in the dashboard. To delete your account, email us. We may retain some records where required by law or for legitimate business needs. Cached or archived copies can persist for a time.

Cookies

We use Google Analytics to measure visits to our website. Visitors in the EEA, UK, and Switzerland are asked first, and anyone can change their choice with Cookie settings in the footer. Most browsers let you delete or block cookies. Some features may not function without them.

Marketing

You can unsubscribe from trial emails using the link in each one. We still send emails about your account, usage, and billing.

Changes to this policy

We will update this page when our practices change and revise the date above. For significant changes we may provide additional notice in product or by email.

Contact

Questions about privacy or data protection: support@example.smallpics.io.