Privacy Policy

1. Introduction

We are the controller of the personal information processed through the Service. This policy applies to visitors, free users, and paying customers, and covers our website, dashboard, and API. It should be read together with our Terms and Conditions.

Where we act as a processor on your behalf — for example, when we process images you submit — we do so only to provide the Service and following your instructions, as described below.

2. Information We Collect

Personal Information

When you create an account or contact us, we collect:

• Account details — your name, email address, and profile picture, obtained from your chosen sign-in provider (such as Google) when you sign in.
• Billing information — your subscription plan and payment status. Card details are collected and stored by our payment processor (Stripe), not by us.
• Communications — messages you send us for support or legal matters.

Technical Information

• IP address, browser type, device and operating-system information.
• API keys and authentication tokens associated with your account.
• Approximate region, inferred from your IP address or browser settings, used to apply the correct privacy experience and for security.

Usage Data

• Requests you make to the Service, quality tier used, image consumption, timestamps, and error/diagnostic logs.
• Interactions with the website and, where you have consented, analytics events describing how you use it.

We do not retain the content of your uploaded images or processed results as part of this usage data — see the next section.

3. Image Processing & Data Retention

This is the most important section for most of our users, so we’ve written it in plain language. When you upload an image, here is exactly what happens to it:

In short: we treat your images as transient input to a tool, not as data to collect. Please still keep your own copy of any original image — because we delete results quickly and keep no backups, we cannot re-send a result you did not download in time.

4. Cookies & Analytics Technologies

We use cookies and similar local-storage technologies. You control non-essential categories through our consent tool, which you can reopen at any time from the Cookie preferences link in the footer or the button below.

Cookies

• Necessary — required for the site to work: sign-in sessions, staying signed in between visits (a persistent authentication cookie so you don’t have to log in every time), security, load balancing, and remembering your consent choice. Always active.
• Functional — remember preferences such as your language and light/dark theme.
• Analytics — help us understand how the site is used so we can improve it.
• Marketing — measure advertising and show relevant messages. Off unless you opt in.

Analytics Technologies

Where you consent, we use analytics and advertising technologies. We do not load any of these until you have granted the corresponding consent category (and, in regions where consent is required, they stay off by default).

• Google Analytics — aggregated website analytics to measure traffic and improve the Service. Loaded only with your Analytics consent.
• Google Ads — advertising and conversion measurement. Loaded only with your Marketing consent.
• Adsterra — a third-party advertising network used to display ads to free-tier users. Loaded only with your Marketing consent.

Advertising

The Service is free for basic use, and we may show advertisements to free-tier users to support it. Paid subscribers are never shown ads, and ad scripts are never loaded in their browsers. When ads are shown, our advertising partners (such as Adsterra) may set cookies and process technical data (like your IP address, device, and ad interactions) to serve and measure ads. These technologies load only after you grant Marketing consent, and you can withdraw consent at any time via Cookie preferences. We never share your uploaded images with any advertising network — advertising and image processing are entirely separate.

Stripe Payments

When you subscribe, our payment processor Stripe may set cookies and process your payment and device information to complete the transaction and prevent fraud. This processing is necessary to provide paid features. See Stripe’s privacy notice for details.

Manage cookie preferences

5. Third-Party Services

We share limited personal information with trusted service providers who process it on our behalf, only as needed to run the Service:

• Google — sign-in (authentication) and, with consent, Analytics and Ads.
• Adsterra — advertising network shown to free-tier users, with your Marketing consent.
• Stripe — subscription billing and payment processing.
• Hosting and infrastructure providers — to operate our servers and deliver the Service.

These providers are bound by their own privacy and security obligations. We do not sell your personal information, and we do not share your uploaded images with any of them beyond the transient processing described above.

6. Security

We use technical and organizational measures to protect your information, including encryption in transit (HTTPS), access controls, API-key authentication, and minimizing the data we keep. Because we do not persist your images and keep no backups of them, the exposure window for your visual content is inherently small.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities where required by law.

7. Data Retention

• Uploaded images and results — not stored for standard processing; for asynchronous HQ jobs, deleted automatically at most within one hour (typically minutes). No backups.
• Account data — kept while your account is active and for a reasonable period afterward to meet legal, tax, and accounting obligations, then deleted or anonymized.
• Billing records — retained as required by law (for example, tax and invoicing rules).
• Logs and usage data — retained for a limited period for security, debugging, and abuse prevention.

8. Your Rights

Depending on where you live (including under the EU/UK GDPR), you have the following rights over your personal information. To exercise any of them, contact us using the details below; we will respond within the time required by applicable law.

Right to Access

You can request a copy of the personal information we hold about you and information about how we use it.

Right to Rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to Erasure

You can ask us to delete your personal information (the “right to be forgotten”), subject to legal retention obligations.

Data Portability

You can ask to receive certain personal information in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

You also have the right to object to or restrict certain processing, to withdraw consent at any time (without affecting processing already carried out), and to lodge a complaint with your local data-protection authority. Where our processing relies on consent, you can change your choices at any time via Cookie preferences.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the CPRA. This section describes our practices and your choices.

Categories of personal information we collect: identifiers (such as name, email, IP address), commercial information (subscription and payment status), internet/network activity (usage and analytics data where consented), and geolocation inferred at the region level.

Purpose of collection: to provide and secure the Service, process payments, respond to you, comply with law, and — only where you consent — to measure and improve the Service and advertising.

Your California rights:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the “sale” or “sharing” of your personal information.
• The right not to receive discriminatory treatment for exercising your rights.

10. International Data Transfers

We operate online and may process and store personal information in countries other than your own, including countries that may not provide the same level of data protection as your jurisdiction. Where we transfer personal information internationally, we rely on appropriate safeguards recognized under applicable law — such as the European Commission’s Standard Contractual Clauses — to protect your information.

11. Children’s Privacy

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Contact Information