What we collect and why

Who is responsible for your data

AIphotoenhancer is responsible for the personal data described in this policy. Questions and privacy requests can be sent to hello@aiphoto-enhancer.com with the subject line "Privacy request."

Information we collect

• Account information, such as your Clerk user ID, email address, display name, sign-in method, and session data.
• Billing information, such as Subotiz customer, order, and subscription IDs, plan status, invoice status, purchase type, and payment timestamps. Card numbers and security codes are entered on Subotiz-hosted pages and are not sent to our application servers.
• Service activity, including credit grants and deductions, selected processing mode, job status, request time, error records, IP-derived security signals, browser information, and anonymous device identifiers used to issue and protect guest credits.
• Images you choose to submit and the processed output returned for that request.
• Messages you send to support, including your email address and any details you include voluntarily.

How we use information

We use this information to authenticate users, run image jobs, account for credits, provide subscriptions, prevent fraud and abuse, troubleshoot failures, answer support requests, maintain security, meet tax and accounting duties, and improve reliability. Where applicable, the legal basis is performance of our contract with you, compliance with law, consent, or our legitimate interest in operating and protecting the service.

How images are handled

AIphotoenhancer does not place uploads in a public gallery or store image files in the Neon account database. During a job, the image is uploaded to fal.ai and sent to the selected processing model. We request that fal.ai does not retain the input and output payload record, and uploaded files are configured with a short lifecycle. CDN files may remain accessible for a limited period under fal.ai's storage controls. The processed image is downloaded by our server and returned to your browser. We do not use submitted images to train our own model.

Do not upload an image that you are not comfortable sending to an external AI processing provider. For highly sensitive, regulated, or confidential material, use an approved offline workflow instead.

Service providers

We disclose data only as needed to operate the service:

• Clerk provides account registration, sign-in, session management, and account security.
• Subotiz provides hosted checkout, payment processing, invoices, tax handling, and the customer billing portal as merchant of record.
• fal.ai receives image files and processing settings to run enhancement models.
• Neon stores account links, subscription state, credit balances, and credit transaction records.
• Vercel hosts the application and may process request logs and technical data.
• Cloudflare supports DNS, network delivery, and security for the domain.
• Google Analytics is loaded only when the site owner configures it and may receive page and event data with IP anonymization enabled.

These companies process information under their own contracts and privacy terms. They may operate in countries other than yours. Where required, international transfers rely on contractual or other legally recognized safeguards.

Cookies and local storage

Clerk uses cookies required for sign-in and session security. Subotiz may set cookies on its checkout and billing pages. The site also stores a random anonymous identifier in your browser so the guest credit cannot be claimed repeatedly from the same browser. If analytics is enabled, Google Analytics may use identifiers to measure site use. Blocking essential authentication storage can prevent account features from working.

Retention

Account and credit records are kept while the account is active. Transaction, invoice, fraud-prevention, and tax records may be retained after account closure when required for legal, accounting, dispute, or security reasons. Support messages are kept only as long as needed to resolve the request and maintain a reasonable record of the outcome. Server logs are kept for a limited operational period. Image files follow the handling described above and are not retained in the Neon database.

Your choices and rights

Depending on where you live, you may ask to access, correct, delete, restrict, or receive a copy of your personal data. You may also object to certain processing or withdraw consent where consent is the legal basis. We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against people for exercising privacy rights.

Send requests to hello@aiphoto-enhancer.com. We may verify the request through the account email or another reasonable method. An authorized agent may submit a request, but we may require proof of authority and direct verification from the account holder. EEA and UK residents may also complain to their local data protection authority.

Children

The service is not directed to children under 13, or to a higher minimum age where local law requires it. If you believe a child submitted personal data without valid permission, contact us so we can review and delete it.

Security

The service uses HTTPS, signed Clerk sessions, server-side API keys, verified webhooks, database access controls, and transaction records for credit changes. No online service can guarantee absolute security. If we identify a breach that requires notice, we will notify affected people and authorities as required by law.

Changes to this policy

We may update this policy when the product, providers, or legal duties change. The date above shows the latest revision. Material changes will be announced in the service or by email when required.