Privacy Policy

1. Introduction

Picture Enhancer (“the Service”) is an online tool for sharpening, upscaling, and restoring photos. This Privacy Policy explains what we collect, why we collect it, and how long we keep it when you use the Service.

We follow a minimal-collection approach: we process what is needed to enhance your picture, run the guest trial, keep your history if you want it, bill paid plans, and keep the Service secure. We do not sell your photos or personal information.

2. Information we collect and process

What we process depends on how you use the Service.

If you try the Service as a guest

• A temporary shadow session so the enhancer can run without an account
• The photos you upload, any prompt or mode you choose (Sharpen, Upscale, Restore), and the enhanced outputs from that visit
• A guest-trial count. Successful generations are counted per device and IP address, so clearing cookies does not reset the trial
• A first-party visitor identifier stored in the browser (local storage and a cookie) so we can understand landing-to-paid conversion without a third-party ad pixel for that funnel

If you create or sign in to an account

• Account details such as email address, name, login method (email or a connected OAuth provider such as Google or GitHub, when enabled), session data, and preferences
• Enhancement history: uploads, outputs, chats, and related metadata
• Credits, orders, subscription status, and billing records
• Emails you send us at the public address listed on the Contact page

Technical, security, and product data (guests and accounts)

• Device, browser, language, and approximate network information (including IP address) used for compatibility, locale, abuse prevention, and the guest trial
• First-party product events (for example page views and key funnel steps) and, if configured in admin settings, Google Analytics
• Cookies and similar technologies for authentication, locale, theme, security, and the visitor identifier above

Payments

Card numbers and wallet credentials are handled by third-party processors (such as Stripe, PayPal, or Creem). We store order and subscription status, not full card numbers.

3. How we use information

We use this information to:

• Run sharpen, upscale, and restore jobs and show you the result
• Authenticate you, keep sessions, and recover or verify an account
• Enforce the guest trial and credit balances
• Keep chats and a library so you can revisit, download, or delete past work
• Process checkout, subscriptions, credits, invoices, and related support
• Send transactional mail such as verification, password reset, and billing notices
• Measure product usage, fix bugs, and prevent fraud or abuse
• Comply with law and protect the Service and other users

If you later sign up from a guest session, we may migrate that visit’s chats and images onto the new account so your drafts are not lost.

4. How data is shared

We do not sell personal information or your photos. We share limited data with processors that help us operate the Service:

• AI model providers — your upload (and related instructions) must be sent to a model provider so the enhancement can run. Those providers process the file to return a result; they are not given a license to use your photos for their own public training because of this Service
• Object storage and hosting — to store uploads, outputs, and the application itself
• Authentication and email — account login and transactional messages
• Payments — checkout, subscriptions, and invoices
• Analytics and security — first-party events we store ourselves, optional Google Analytics if enabled, and anti-abuse checks

We may also disclose information if required by law, to respond to a lawful request, or to protect the rights, property, or safety of the Service or its users.

5. Data retention

We keep data only as long as needed for the purpose it was collected, plus security, support, tax, and legal needs.

• Guest visits. We keep the shadow session, uploads, and outputs needed for that visit’s history and for the trial counter. Guest jobs are not published or indexed. Some security and abuse records (including trial counts tied to device or IP) may last longer than the browser session.
• Signed-in accounts. We may keep account data, history, credits, orders, and support records while the account is open and for a reasonable period after closure if we still need them for billing, disputes, security, or law.
• Deletion. You can delete individual generations and chats from the product. You can close an account from settings or ask us through Contact. Some records cannot be erased immediately (for example paid invoices or abuse logs).

We do not put private uploads into a public search index, and we do not use your private photos to train public machine-learning models.

6. Security

Traffic uses HTTPS/TLS. We restrict access to production data and review how processors handle files. No internet transmission is perfectly secure; you should not upload images you are not willing to send to a processor in order to enhance them.

7. Children’s privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has used the Service, contact us and we will delete the data we can.

8. Your rights

Subject to applicable law, you may:

• Access or receive a copy of account-related personal data
• Correct inaccurate account information
• Delete eligible personal data, chats, or generations
• Export certain account information
• Object to or restrict some processing, where the law gives you that right

Use account settings where the control exists, or write to the public email on the Contact page. We may need to keep some information for security, fraud prevention, tax, accounting, or other legal reasons.

9. Legal basis

Where a legal basis is required, we process data to perform the contract of providing the Service you asked for, to meet legal duties, and for legitimate interests in operating, securing, and improving the Service. Optional analytics that are not strictly required may rely on consent where the law requires it.

10. Changes

We may update this Privacy Policy. Material changes will be shown by a new “Last updated” date on this page and, where appropriate, a notice in the Service.

11. Contact

Questions about this policy: use the public email on the Contact page.