Privacy Policy

1. Data Controller

The Service is operated by self-employed individual Nassedkin Maxim (IIN ***********), address: Pavlodar, Republic of Kazakhstan. Contact email: [email protected].

2. Information we collect

• Account data: email, authentication identifiers, profile settings (including account/login records processed through Supabase authentication tooling).
• User content: photos, videos and any metadata you submit for analysis.
• Technical data: IP address, device and browser information, logs for security and reliability.
• Billing metadata from payment processors. We do NOT collect or store full payment card details.

3. How we use information

• To provide, operate and improve the Service, including AI-based analysis and metadata generation.
• To authenticate users, secure accounts, and prevent abuse.
• To process subscriptions, invoices and payment events via third-party processors (see Payments section).
• To respond to support requests and provide customer service.
• To review and process verified legal/privacy requests, including requests submitted via /legal/requests.

4. Media storage and retention

Uploaded media is stored on infrastructure controlled by the Service operator (not in Supabase Storage). Raw media is retained for up to 1 month from upload. Preview files and analysis history entries may be kept until deleted by the user in the history interface or until account deletion. Backups and logs required for legal compliance and security may be retained longer where required.

5. Payments and third-party processors

All payments are processed by our partner Lemon Squeezy (https://www.lemonsqueezy.com). We do not store your payment card details. Please review Lemon Squeezy's privacy and refund policies for payment-specific information. Refund rule: if any paid-plan usage has occurred at least once, the purchase is considered consumed and is non-refundable, except where mandatory law provides otherwise. Final payment processing and settlement are handled by Lemon Squeezy.

6. AI processing and third-party services

We may send uploaded content to third-party AI providers (for example Google Gemini or other APIs) to generate metadata and recommendations. AI outputs are provided "as is" and may be inaccurate; you are responsible for reviewing any generated text before publishing. By using the Service and uploading media, you grant permission to use your media and derived data to improve and train machine-learning models and related quality systems, including via trusted processors, subject to applicable law.

7. Sharing and processors

We share data only with trusted service providers that perform services on our behalf (hosting, storage, analytics, AI, payments). These processors are contractually required to protect your data in accordance with applicable law.

8. Security

We implement reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is 100% secure. In case of a security incident we contain and assess impact, then notify affected users and competent authorities without undue delay and within statutory timelines where required by law.

9. Your rights

Depending on your jurisdiction (including Kazakhstan), you may have rights to access, correct, export, delete your personal data, and to object to or restrict processing. You can submit requests through /legal/requests or via [email protected]. Standard response time is up to 30 calendar days unless mandatory law sets another period.

10. Cross-border transfers

Your data may be processed in countries other than your own. When applicable, we rely on appropriate safeguards or legal mechanisms for cross-border transfers.

11. Children

The Service is not directed to children under 13 (or the minimum age under local law). We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, via direct notice to users.

13. Legal contact details

Responsible person for legal and privacy requests: Nassedkin Maxim. Email: [email protected].

14. Legal basis and processor commitments

We process personal data under one or more legal bases: performance of contract, consent, legitimate interests, and legal obligations. We use trusted processors under contractual confidentiality and data-protection obligations. Processor list and DPA-related details are available on reasonable request.

Contact

For privacy or legal requests, contact us at [email protected].