Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

1.1 Information You Provide Directly

• Account Registration: When you create an account, we collect your name, email address, and password (stored in hashed form).
• Google Sign-In: If you authenticate via Google, we receive your name, email address, and profile picture URL as provided by Google OAuth 2.0.
• Payment Information: Payment transactions are processed by our third-party payment processor. We do not store full credit card numbers or sensitive financial data on our servers; we only retain transaction identifiers and subscription status.
• Communications: If you contact our support team, we collect the content of your communications and contact details.

1.2 Information Collected Automatically

• Log Data: Our servers automatically record your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
• Device Identifiers: We generate and store an anonymized device fingerprint ("Product-Serial") to prevent abuse and enforce per-account usage limits.
• Usage Data: We collect information about how you interact with the Service, including features used, processing job IDs, error events, and session duration.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies as described in Section 6 of this Policy.

1.3 User-Uploaded Content

To provide the Service, you may upload images for AI processing (enhancement, upscaling, restoration, sharpening, or deblurring). Uploaded files are transmitted over encrypted connections (TLS), processed on our servers, and the output is made available to you. We do not use your uploaded images to train AI or machine-learning models without your explicit consent. Uploaded files are automatically deleted from our servers within 24 hours after processing is complete.

2. How We Use Your Information

We use the information we collect for the following purposes and, where required by law, on the following legal bases:

We do not sell your personal information to third parties.

3. How We Share Your Information

We may share your personal information with the following categories of recipients:

• Service Providers: Third-party vendors that help us operate the Service, including cloud infrastructure providers, payment processors, customer support platforms, and analytics providers. These vendors are contractually bound to use your information only as directed by us.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.
• Legal Compliance: We may disclose your information when required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share your information for any other purpose with your prior consent.

We do not share your uploaded images with third parties except as strictly necessary to provide the requested AI processing service.

4. Data Retention

• Uploaded Images: Automatically deleted within 24 hours after processing is complete.
• Account Data: Retained for the duration of your account and for up to 90 days following account deletion, to allow for dispute resolution and legal compliance.
• Transaction Records: Retained for a minimum of 7 years as required by applicable financial regulations.
• Log Data: Retained for up to 12 months, then aggregated or deleted.
• Marketing Preferences: Retained until you withdraw consent or opt out.

5. International Data Transfers

EzEnhancer is operated from servers that may be located in the United States and other countries. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in a country other than your country of residence.

For transfers of personal data from the EEA, UK, or Switzerland to countries not recognized as providing an adequate level of data protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses ("SCCs") or equivalent mechanisms. You may request a copy of any applicable transfer mechanism by contacting us at the address in Section 13.

6. Cookies and Tracking Technologies

We use cookies, pixel tags, local storage, and similar technologies (collectively, "cookies") to operate and improve the Service. You can find our full Cookie Policy at ezenhancer.ai/agreement/cookie-policy/.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Service to function (e.g., authentication session tokens, CSRF protection). These cannot be disabled.
• Functional Cookies: Remember your preferences such as language selection and theme settings.
• Analytics Cookies: Help us understand how visitors use the Service (e.g., Google Analytics, Alibaba Cloud SLS). Analytics data is aggregated and anonymized where possible.
• Marketing / Targeting Cookies: Used by third-party advertising partners to deliver relevant advertisements. You may opt out via the choices described below.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that disabling certain cookies may affect the functionality of the Service. For more information, visit www.allaboutcookies.org.

To opt out of interest-based advertising by third parties, you may visit the Digital Advertising Alliance, the Network Advertising Initiative, or, if you are in the EEA, Your Online Choices.

7. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher.
• Encrypted storage of passwords using one-way hashing algorithms.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security reviews and vulnerability assessments.

Despite our efforts, no security system is impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction, up to 16 in certain EEA member states). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take steps to delete such information promptly.

9. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to certain exceptions.
• Restriction: Request that we restrict the processing of your information in certain circumstances.
• Portability: Receive your personal information in a structured, machine-readable format and transfer it to another controller.
• Objection: Object to processing based on our legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on your consent, withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Lodge a Complaint: File a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before fulfilling a request.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (such as Google Sign-In). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") grants you specific rights:

• Right to Know: The categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond the purposes permitted by CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a verifiable consumer request, contact us at [email protected].

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other business purposes. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, notify you by email or by posting a prominent notice on the Service prior to the change becoming effective. Your continued use of the Service after the effective date constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

If you are in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to contact your local data protection authority. A list of EU data protection authorities is available at edpb.europa.eu.