Privacy Policy

Information we collect

• Account information: when you sign in with Google, we store your Google account identifier, name, email address and email verification status. We do not receive or store your Google password, and we do not store Google access tokens.
• Images and results: the images you upload and the enhanced images generated from them.
• Usage and transaction data: credits purchased and spent, processing requests (resolution, status, time), and order records.
• Payment information: payments are handled by our payment provider. We receive order status, amount and a provider reference, but we never receive or store your full card number or security code.
• Technical data: IP address, browser type and request logs needed for security, rate limiting and troubleshooting.

How we use your information

• To sign you in and manage your account and credit balance.
• To process your images and deliver enhanced results.
• To process payments, subscriptions and refunds, and to prevent fraud and abuse.
• To provide support and send essential service messages about your account or orders.
• To keep the service secure, comply with law and enforce our Terms of Service.

How your images are processed

Images you upload are stored on our server and sent to a third-party AI model provider (currently OpenAI) solely to generate your enhanced image. We request that the provider does not store requests for reuse, and we do not use your images to train AI models.

Uploads and results expire after 24 hours and are deleted during the next scheduled cleanup. Please download any result you want to keep before it expires. Images created while signed in are visible only to your account.

Sharing with third parties

We do not sell your personal information. We share data only with service providers that help us run aiimage4k, and only as needed for that purpose:

• Google, for sign-in.
• Our AI model provider, for image processing.
• Our payment provider, for checkout, subscriptions, tax and refunds.
• Hosting and infrastructure providers that store and serve our application.
• Microsoft (Clarity), for website usage analytics.
• Authorities, when required by law or to protect our rights, users or the public.

Cookies

We use two kinds of cookies: cookies necessary for the site to work, such as your session and security (CSRF) cookies and a cookie that remembers your analytics choice, and analytics cookies set by Microsoft Clarity (see the next section). We do not use advertising cookies.

You can clear or block cookies in your browser settings. Blocking analytics cookies does not affect how the site works; blocking necessary cookies may stop you from signing in.

Usage analytics (Microsoft Clarity)

We use Microsoft Clarity on our public pages to understand how visitors use the site, so we can improve the product and page design. Clarity is not loaded on sign-in, account or admin pages.

Clarity collects page interactions such as clicks, scrolling and mouse movement to produce heatmaps and session replays, and records information such as device type, browser and approximate region. It sets cookies to recognize repeat visits from the same visitor.

Microsoft processes this data on our behalf, and the Microsoft Privacy Statement (privacy.microsoft.com) also applies. We use this data only to analyze and improve the site, never for advertising, and we do not sell it.

For visitors from the European Economic Area, the UK and Switzerland, and visitors whose region we cannot determine, we load Clarity only after you choose Allow in the cookie notice. Wherever you are, you can change or withdraw your choice at any time with Cookie settings at the bottom of the page.

Data retention

• Uploaded images and results: up to 24 hours, then deleted in scheduled cleanup.
• Account information: while your account is active, or until you ask us to delete it.
• Order and payment records: as long as required for accounting, tax and legal obligations.
• Security logs: kept for a limited period for security and troubleshooting.

Security

We protect data with encrypted connections (HTTPS), access controls and limited staff access. No online service can guarantee absolute security, so please keep your Google account secure.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. You can update your name in your account. To make any other request, email us from the address linked to your account; we will respond within 30 days.

International transfers

Our service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers.

Children

The service is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect their information. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date, and notify you of significant changes where appropriate.

Questions? Email us at [email protected]