Privacy Policy

Last updated: August 31, 2025

1. Introduction

Welcome to Upscayl Cloud ("Company", "we", "our", "us"). We provide an online AI image upscaling and enhancement service (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we share it, and your choices. If you do not agree with this policy, please do not use the Service.

We are committed to privacy by design:

We collect only what we need to operate and improve the Service.
We do not sell personal information.
Your images are not used to train AI models.

2. What We Collect

We collect the following categories of information when you use the Service:

2.1 Account Information

Email address, display name, and unique user ID from Firebase Authentication
Basic profile metadata you choose to provide

2.2 Usage and Device Information

Event and usage data (e.g., feature usage, performance metrics) collected via PostHog
Device type, browser type/version, operating system, approximate location (derived from IP), timestamps
Log data from our servers and cloud functions for security, diagnostics, and fraud prevention

2.3 Payment and Subscription Information

Subscription status, plan details, and transaction metadata from our payment partners (PayPal and/or Lemon Squeezy). Stripe may be used for certain workflows. We do not store full card numbers or CVVs; payment data is processed by our payment providers

2.4 Uploaded Content and Generated Outputs

Images you upload, links you provide for processing, and generated outputs
File metadata (e.g., filename, MIME type, size, dimensions) and storage paths

2.5 Communications

Support correspondence and feedback (email content and headers)

3. How We Use Information

We use your information to:

Provide, operate, and maintain the Service
Authenticate users, manage accounts, and enforce access controls
Process images and deliver outputs
Measure performance, improve features, and troubleshoot issues
Communicate about updates, billing, and support
Detect, prevent, and address fraud, abuse, and security incidents
Comply with legal obligations

4. Legal Bases (EEA/UK)

Where applicable law requires a legal basis, we rely on:

Performance of a contract (providing the Service)
Legitimate interests (security, analytics, service improvement)
Consent (where required for optional analytics/cookies)
Legal obligations (accounting, compliance)

5. Cookies and Similar Technologies

We use cookies and similar technologies to:

Keep you signed in and protect your account (strictly necessary)
Measure usage and improve the Service (analytics via PostHog)

You can control cookies through your browser settings. If your browser sends a Do Not Track (DNT) signal, we will respect it for PostHog where supported. Some features may not function without required cookies.

6. Data Retention

Account records: kept while your account is active and as needed for legal/compliance purposes
Usage analytics: retained no longer than necessary for the purposes described above
Uploaded input files and URL-retrieved inputs: we aim to retain for up to 1 days from upload, after which they may be deleted or overwritten pursuant to storage lifecycle policies
Generated outputs: retained for 180 days, or until you delete them, subject to backup and system logs

Note: Actual deletion timing may vary due to backups, caches, and system safeguards. You can request deletion at any time (see Your Rights).

7. How We Share Information

We do not sell your personal information. We share data only with service providers that help us run the Service, subject to appropriate safeguards:

Firebase (Google Cloud): authentication, database, serverless functions
Amazon Web Services (AWS S3): file storage for uploads/outputs
PostHog: product analytics
PayPal and Lemon Squeezy (and, where applicable, Stripe): payments and subscription management
Email (Gmail): transactional communications
Infrastructure, security, and monitoring vendors as needed

We may also share information to comply with the law, protect users and our systems, or during a merger, acquisition, or asset sale.

8. International Data Transfers

Your information may be processed and stored in countries different from your own (for example, Google Cloud/Firebase and AWS regions, and our analytics/payment providers). Where required, we implement appropriate safeguards such as contractual clauses and technical measures to protect your data.

9. Security

We employ technical and organizational measures to protect your data, including encryption in transit and at rest provided by our cloud providers, access controls, and monitoring. No system is 100% secure; please use strong passwords, keep credentials confidential, and notify us of any suspected compromise.

10. Your Rights

Depending on your location, you may have the right to:

Access a copy of your personal information
Correct inaccurate information
Delete your information (erasure)
Restrict or object to processing
Data portability
Withdraw consent (where processing is based on consent)

To exercise rights, contact us at [email protected]. We will verify your request and respond as required by law.

11. Children’s Privacy

The Service is intended for users aged 13 and older. If you believe a child under 13 has provided us information, please contact us so we can take appropriate action.

12. Third-Party Links and Integrations

The Service may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and update the “Last updated” date above. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or requests about this policy, please contact:

Email: [email protected]

Notes:

Images you upload are used only to provide the Service and are not used for AI model training.
Payment details are processed by our payment partners; we do not store full card numbers.