Privacy Policy - Image Enhancer

1.1 Information You Provide to Us
Account Registration
When you create an account, we collect your name, email address, and password. Passwords are stored exclusively in a securely hashed format and are never retained in plain text.

Google Sign-In
If you choose to authenticate through Google, we receive your name, email address, and profile picture URL via Google's OAuth 2.0 authentication protocol.

Payment Details
All payment transactions are processed by our authorised third-party payment processor. We do not store full credit card numbers or any other sensitive financial information on our servers. We retain only transaction identifiers and subscription status records necessary to manage your account.

Communications
When you contact our support team or otherwise correspond with us, we collect the content of those communications along with any contact details you provide.

1.2 Information We Collect Automatically
Certain information is collected automatically when you access or use the Service. We also work closely with third parties, including subcontractors in technical capacities, analytics providers, and search information providers, and may receive information about you from them, subject to your agreements with those parties.

• Log Data: Our servers automatically record your IP address, browser type and version, operating system, referring URLs, pages visited within the Service, and the date and time of each request.
• Device Identifiers: We generate and store an anonymized device fingerprint (referred to internally as a "Product-Serial") for abuse prevention and enforcement of per-account usage limits.
• Usage Data: We collect information about how you interact with the Service, including features used, processing job identifiers, error events, and session duration.

1.3 User-Uploaded Content
To deliver the Service, you may upload images for AI-powered processing such as enhancement, upscaling, restoration, sharpening, or deblurring. All uploaded files are transmitted over encrypted connections secured by Transport Layer Security (TLS), processed according to your selected parameters, and the resulting output is made available to you for download.

Important: We do not use your uploaded images for training artificial intelligence or machine-learning models without first obtaining your explicit consent. All uploaded files are automatically and permanently deleted from our servers within twenty-four (24) hours after processing is completed.

We use the information we collect for the purposes set out below. Where required under applicable law, we have identified the corresponding legal basis for each processing activity.

We do not sell your personal information to any third party, nor do we permit any third party to use your personal information for their own independent purposes except as expressly described in this Policy.

We may share or disclose your personal information to the following categories of recipients, and only to the extent necessary and appropriate:

• Service Providers: We engage third-party vendors that assist us in operating and delivering the Service, including cloud infrastructure providers, payment processors, customer support platforms, and analytics providers. These vendors are contractually required to use your personal information solely as we direct and in a manner consistent with this Policy.
• Business Transfers: In the event of a merger, acquisition, reorganisation, or sale of all or a substantial portion of our assets, your personal information may be transferred to the acquiring entity. We will provide you with notice before your personal information becomes subject to a different privacy policy.
• Legal Compliance and Protection of Rights: We may disclose your personal information when required by law, regulation, court order, or governmental authority, or when we believe in good faith that such disclosure is reasonably necessary to protect our rights, enforce our terms, or safeguard the safety of you or others.
• With Your Consent: We may share your personal information for any other purpose where we have obtained your prior, informed consent.

Uploaded Images: We do not share, distribute, or otherwise make available your uploaded images to any third party, except to the extent strictly necessary to provide the requested AI processing service.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods are as follows:

We implement and maintain industry-standard technical and organisational measures designed to protect your personal information against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption of all data in transit using Transport Layer Security (TLS) version 1.2 or higher.
• Encrypted storage of user passwords using one-way cryptographic hashing algorithms.
• Strict access controls limiting employee and contractor access to personal data on a need-to-know basis.
• Regular security reviews, vulnerability assessments, and penetration testing.

Despite these safeguards, no method of transmission over the Internet and no method of electronic storage is entirely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities in accordance with applicable law.

Image Enhancer is operated from servers that may be located in the United States and in other countries around the world. If you access the Service from outside the United States, your personal information may be transferred to, stored in, and processed in a country other than your country of residence, which may have data protection laws that differ from those in your jurisdiction.

For transfers of personal data originating from the EEA, the United Kingdom, or Switzerland to countries that have not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses ("SCCs") or equivalent transfer mechanisms recognized under applicable law. You may request a copy of any applicable transfer mechanism by contacting us using the details provided in the "Contact Us" section of this Policy.

Depending on your location and the laws applicable to you, you may have some or all of the following rights with respect to the personal information we hold about you:

• Access - Request a copy of the personal information we hold about you, together with information about how such data is being processed.
• Rectification - Request the correction or updating of any inaccurate, incomplete, or outdated personal information.
• Erasure ("Right to be Forgotten") - Request the deletion of your personal information, subject to certain legal exceptions.
• Restriction of Processing - Request that we restrict or limit the processing of your personal information in certain specified circumstances.
• Data Portability - Request to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to have such information transmitted to another controller where technically feasible.
• Objection - Object to the processing of your personal information where such processing is carried out on the basis of legitimate interests, or where your information is being used for direct marketing.
• Withdrawal of Consent - Where processing is based on your consent, you may withdraw that consent at any time. Such withdrawal will not affect the lawfulness of any processing carried out prior to withdrawal.
• Lodge a Complaint - You have the right to file a complaint with your local data protection supervisory authority if you believe our processing of your personal information does not comply with applicable data protection law.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days, or within such other timeframe as may be required by applicable law. We may need to verify your identity before fulfilling your request.

If you are a resident of the State of California, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), affords you specific rights with respect to your personal information:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding twelve (12) months.
• Right to Delete: Request the deletion of personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: Request the correction of inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information, nor do we share it for the purposes of cross-context behavioural advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes beyond those expressly permitted under the CPRA.
• Right to Non-Discriminrimination: We will not discriminate against you in any way for exercising your rights under the CCPA or the CPRA.

To submit a verifiable consumer request under the CCPA or the CPRA, please contact us at [email protected].

The Service is not directed to, nor intended for use by, children under the age of thirteen (13), or the applicable minimum age in your jurisdiction (which may be up to sixteen (16) in certain EEA member states). We do not knowingly collect, solicit, or process personal information from children.

If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such notification, we will take prompt steps to investigate and delete any such information from our systems.

The Service may contain links to websites, platforms, or services operated by third parties, or may integrate with third-party services such as Google Sign-In. We are not responsible for the privacy practices, policies, or content of any such third-party services, and we do not exercise control over the information collected by them.

We strongly encourage you to review the privacy policies of any third-party services before providing them with any personal information.

We may update or revise this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other legitimate business purposes. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by applicable law, notify you by email or by posting a prominent notice on the Service before the change takes effect.

Your continued use of the Service following the effective date of any revised Policy constitutes your acceptance of and agreement to the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please do not hesitate to contact us:

Image Enhancer AI
Email: [email protected]
Website: https://image-enhancer.ai

If you are located in the EEA and believe that we have not adequately addressed your privacy concerns, you retain the right to lodge a complaint with your local data protection supervisory authority. A list of data protection authorities is available at edpb.europa.eu.