Privacy policy

Privacy Policy

Last updated: May 25, 2026

1. Controller and General Information

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

VFotos - AI Works
Owner: Daniela Weidtmann
Westallee 3b, 26524 Hage, Germany
Email: info@vfotos.de

Maia Storm AI Studio is a brand and the visual identity of our online shop. This online shop is powered by the Shopify platform, which enables us to provide our digital products and services to you. This Privacy Policy describes how we collect, use, or disclose personal data when you visit, use, make a purchase, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using any of our services, you acknowledge that you have read and understood this Privacy Policy.

2. What Personal Data Do We Collect or Process?

Depending on how you interact with our services, we may collect or process the following categories of personal data:

  • Contact Information: Including name, billing address, phone number, and email address. A physical shipping address is not collected for our purely digital products.
  • Financial Data: Including credit, debit, or financial account numbers, payment card information, transaction details, payment method, payment confirmation, and other payment details.
  • Account Information: Including username, password, security questions, configurations, and settings.
  • Transaction Information: Including items you view, add to your cart, or purchase, as well as your past transactions.
  • Communication with us: Including information you provide when communicating with us, for example, when sending an inquiry to customer support.
  • Device Information: Including information about your device, browser, network connection, IP address, and other unique identifiers.
  • Usage Information: Including information about your interaction with our services, including how and when you browse the website.

3. Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you: When you purchase digital products, create an account, or communicate with us.
  • Automatically via the Services: From your device when visiting our website, as well as through the use of cookies and similar technologies.
  • From our service providers: When we engage service providers to enable certain technologies on our behalf.

4. How Do We Use Your Personal Data?

Depending on how you interact with us, we use personal data for the following purposes:

  • Provision and Performance of the Contract: To fulfill our contract with you, process your payments, and execute your orders. The legal basis for this is Art. 6 (1) (b) GDPR.
  • Communication with you: To provide customer support and respond to your inquiries.
  • Security and Fraud Prevention: To ensure a safe shopping experience and detect potentially fraudulent or illegal activities.
  • Legal Reasons: To comply with applicable law or respond to lawful legal processes.

5. Disclosure of Personal Data to Third Parties

To provide our services, we work with specialized service providers to whom we transfer data to the extent required:

  • Shopify: As our shop system provider, Shopify hosts this website and processes data on our behalf for IT management and order processing purposes.
  • Delivery of Digital Content (Pendora): For the provision and automated delivery of the download links for our digital products, we use the app Pendora. The data collected during the order process (specifically email address and order details) will be transferred to Pendora to enable your access to the purchased digital content (prompts). Processing is carried out to fulfill our contract with you pursuant to Art. 6 (1) (b) GDPR.
  • Payment Processing (Shopify Payments & Partners): We process payments through the service provider Shopify Payments. Depending on the selected payment method, your payment data will be forwarded to the corresponding networks and providers (including Stripe, Klarna, PayPal, MobilePay, BLIK). This is done solely for the purpose of payment processing pursuant to Art. 6 (1) (b) GDPR.
  • Automated Accounting (sevDesk): We use the accounting software sevDesk provided by sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany. Invoice and transaction data are transferred to fulfill our legal and tax obligations under Art. 6 (1) (b) and (c) GDPR.
  • Email Marketing and Notifications (Shopify Email): We use Shopify Email provided by Shopify International Limited, Derry, Northern Ireland, for system emails and newsletters. Newsletters are processed by consent (Art. 6 (1) (a) GDPR), transactional emails for contract fulfillment (Art. 6 (1) (b) GDPR).
  • Use of Affiliate Links (Partner Programs): We include affiliate links to external partners on our website. If you click on such a link, you will be redirected to the website of the respective third-party provider. In doing so, technically necessary data (e.g., a partner ID, your IP address, and the time of the click) are processed and transmitted to the operator of the partner program to enable the billing of the referral commission. The processing is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

6. Your Rights

Under the GDPR, you have the right to free information about your stored data, as well as the right to correction, blocking, or deletion of this data, where applicable. To exercise these rights, please contact us directly at info@vfotos.de.