← Back to Luxlens Portal

Privacy policy

Last updated: July 2026 · applies to portal.luxlens.gr

1. Who is responsible

LuxLens.gr (Marcus Jacobi), Posidonos 28, 65302 Kavala, Greece (VAT ΑΦΜ 183131022). For any privacy question write to ai@luxlens.gr. This policy covers the client portal at portal.luxlens.gr only. The main site luxlens.gr has its own policy and uses different services.

2. What we process

  • Your photos. The images you upload, the edited previews we produce, the watermarked versions shown for review, and the final files.
  • Project and contact data. Project name, your name, company, email address, phone number and any notes you send us.
  • Review activity. Your selections, favourites, approvals, comments and correction notes, including drawings on images.
  • Payment data. Amount, currency, status, invoice link, and the billing address and VAT number you enter at checkout.
  • Account data. Only if you register a studio account: email address and password, or your Google sign-in.
  • Technical data. Server logs of our hosting and function providers, and an activity log of uploads, comments, approvals, payments and downloads.

To send us photos as a client you do not need an account. We do not use tracking pixels, advertising cookies or web analytics on this portal.

3. Why we process it

  • To deliver the editing service you ordered — Art. 6(1)(b) GDPR, performance of a contract.
  • To take payment and issue invoices — Art. 6(1)(b) and (c) GDPR.
  • To keep records for tax and accounting — Art. 6(1)(c) GDPR, legal obligation.
  • To keep the portal secure and prevent abuse of upload and review links — Art. 6(1)(f) GDPR, legitimate interest.

4. Who else is involved

  • Google Firebase (Google Ireland Ltd.) — hosting, database, file storage, sign-in and server functions. Some functions run in the United States; transfers are covered by the EU standard contractual clauses and the EU–US Data Privacy Framework.
  • Stripe— card payments, invoicing and tax calculation. Card details are entered on Stripe's own checkout page and never reach us.
  • Resend — sending the emails that carry your links and confirmations.
  • Google reCAPTCHA — abuse protection for the portal.
  • European Commission VIES — validating a VAT number you enter, where applicable.
  • CoinGecko / Kraken — exchange rates, if you choose to pay in Bitcoin. No personal data is sent to them.

We do not sell your data and we do not use your photos to train any AI model.

5. Who can see your photos

Uploaded originals are never public. Review previews carry a watermark and are only reachable through a private link with a random, non-guessable token that expires. Final files are released only after payment is confirmed, through signed links that expire. Where a photo studio uses the portal for its own customers, that studio sees only its own projects.

6. How long we keep it

  • Photos and project data: until you or the studio delete the project, or you ask us to.
  • Payment records: 7 years, as required by tax law.
  • Upload and review links: they expire automatically, typically after 7 to 30 days.
  • Activity log: kept for traceability of orders and payments.

Deleting a project removes the photos from our storage and immediately invalidates the links that pointed to them. Payment records are kept, because the law requires it.

7. Your rights

Under the GDPR you can request access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests. Write to ai@luxlens.gr and we will act on it. You may also complain to your national data protection authority — in Greece, the Hellenic Data Protection Authority (dpa.gr).

8. Cookies and local storage

We set no advertising or analytics cookies. The portal stores what it needs to work: your sign-in session if you have a studio account, a random identifier in your browser so a guest vote is counted once, and the abuse-protection token from reCAPTCHA. You can clear all of it in your browser settings.

9. Security

All traffic runs over HTTPS. Photos are stored in access-controlled storage that is not publicly reachable; every file is delivered through a signed link with a time limit. Payment secrets exist only on the server, never in your browser.

10. Changes

We may update this policy. The date at the top always shows the current version.

11. Contact

LuxLens.gr — Marcus Jacobi, Posidonos 28, 65302 Kavala, Greece — ai@luxlens.gr · Legal notice