Privacy Policy

Effective Date: November 1, 2025
Last Updated: August 4, 2026 Version: 1.1

Introduction

AI Upscale respects your privacy. This Privacy Policy explains what information we collect when you interact with our website at https://AI Upscale, how we use that information, and the choices you have. By using the Service, you agree to the practices described here.

We process personal data as a controller within the meaning of applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Information You Provide

• Account details. Name (or display name), email address, password, avatar preferences, and profile settings.
• Purchases. Billing address, transaction amount, and limited payment metadata provided by our payment processor. We never store full payment card numbers.
• Support requests. Messages you send to support, and any files or screenshots you choose to share.
• Generated content. Prompts, uploaded reference images, and AI-generated outputs saved to your account.

Information Collected Automatically

• Usage analytics. IP address, device type, browser, operating system, language preference, referral URLs, pages viewed, and time spent on the Service.
• Log information. System logs, error reports, and diagnostic data used for debugging.
• Cookies and similar technologies. Small data files stored on your device to maintain sessions, remember preferences, and measure performance. You can control cookies through your browser settings.

Information from Third Parties

• Payment processors. Stripe provides confirmation of successful or failed transactions, card type, and last four digits.
• Email delivery providers. We receive status information from Resend when emails are opened, bounced, or reported as spam.
• Analytics tools. We may use privacy-focused analytics services that report aggregated usage metrics.

How We Use Your Information

We process personal data for the following purposes:

1. Provide, operate, and maintain the Service.
2. Process orders, subscriptions, and credit purchases.
3. Deliver generated avatars and manage your workspace.
4. Respond to customer support inquiries and send important transactional communications.
5. Improve and personalize the Service, including training and tuning models on de-identified prompts unless you opt out.
6. Protect the Service against abuse, fraud, and security threats.
7. Comply with legal obligations, tax requirements, and enforce our Terms of Service.
8. With your consent, send product updates, promotions, or newsletters (you may unsubscribe at any time).

Legal Bases for Processing (EEA/UK Users)

When required, we rely on the following legal bases:

• Performance of a contract (providing the Service you requested).
• Legitimate interests (improving the Service, preventing fraud).
• Compliance with legal obligations (financial record keeping, responding to lawful requests).
• Consent (marketing communications, optional cookies).

Sharing Your Information

We only share personal data with:

• Service providers who assist with hosting, email delivery, analytics, payment processing, customer support, and moderation.
• Professional advisors (lawyers, accountants) as needed for compliance.
• Authorities when required by law or to protect rights, safety, or property.
• Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal data.

Data Retention

We keep personal data only as long as necessary for the purposes described above:

• Account information is retained while your account is active and for up to three years after closure, unless a longer period is required by law.
• Billing records are stored for the period required by tax and accounting regulations (usually 7 years).
• Support tickets and logs are deleted or anonymized within 18 months, unless needed for ongoing investigations.
• Generated content may be deleted by you at any time from your dashboard. We may retain backups for disaster recovery for up to 30 days.

Inactive accounts that have never paid

Starting with schedules created under this policy, a verified account may be scheduled for deletion when it was created more than 30 days ago, we have recorded no sign-in, session, or other account activity for at least 30 consecutive days, and it has never completed a payment. Accounts with an active subscription, payment history, refund, chargeback, payment dispute, or a legal/accounting retention requirement are excluded.

We schedule deletion 30 days in advance and send an account-status notice to the verified email address, followed by another reminder approximately 7 days before deletion. Signing in or using the confirmation page linked from the notice cancels the schedule. Merely opening an email does not cancel it.

Unused free, trial, referral, or promotional credits do not prevent deletion and expire when the account is deleted. Before deletion we recheck activity and payment status. After deletion, we may retain a minimal non-reversible email hash, delivery/suppression record, or other record required to document deletion, prevent unwanted future mail, resolve abuse, or comply with law. We do not use retained records to recreate the account.

International Transfers

Our servers and service providers may be located in the United States and other countries. When transferring personal data across borders, we rely on approved safeguards such as Standard Contractual Clauses or the service provider’s certification mechanisms.

Your Rights

Depending on your location, you may have the right to:

• Access and obtain a copy of your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data when it is no longer needed.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent for marketing communications at any time.

Submit requests by emailing email. We may need to verify your identity before fulfilling a request. If you are unsatisfied with our response, you may contact your local data protection authority.

Security

We implement technical and organizational measures appropriate to the risks of processing personal data, including encryption in transit (HTTPS), access controls, monitoring, and routine backups. No system is perfectly secure; you are responsible for safeguarding your login credentials.

Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us and we will take prompt action to delete it.

Links to Other Websites

Our Service may contain links to third-party sites. We are not responsible for the content or privacy practices of those sites. We encourage you to review their policies before providing personal data.

Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will post the revised document with an updated "Last Updated" date and, when appropriate, notify you via email or in-app message. Continued use of the Service after an update constitutes acceptance of the revised Policy.

Contact Us

If you have questions or concerns about privacy, please contact us at email. For EEA or UK residents, you also have the right to lodge a complaint with your local supervisory authority.