Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

1.1 Information You Provide Directly

EnhancePhoto.ai is a free service and does not require you to create an account or provide payment information to use it. The only personal information you provide to us directly is:

• Communications: If you contact our support team, we collect the content of your communications and your contact details (such as your email address) so that we can respond to you.

1.2 Information Collected Automatically

• Log Data: Our servers automatically record your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
• Device Identifiers: We generate and store a pseudonymous random device identifier ("Product-Serial") to prevent abuse, maintain service continuity, and enforce usage limits. This identifier does not directly state your name, but it can distinguish one browser installation from another.
• Usage and Event Data: We collect information about how you interact with the Service, including pages and Features used, timestamps, processing job IDs, model and option selections, file metadata, download events, error events, moderation signals, and session information.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies as described in Section 6 of this Policy.

1.3 User-Uploaded Content

To provide the Service, you may submit original images, reference images, prompts, editing instructions, and other content for enhancement, upscaling, restoration, colorization, watermark removal, generation, or other AI-assisted editing. These Inputs and the resulting Outputs may contain personal information, including identifiable people. Files are transmitted over encrypted connections (TLS), processed on our systems and those of service providers used to perform the requested processing, and made available to you through result URLs. We process these materials to provide the requested features and for related operational, security, troubleshooting, policy-enforcement, and legal purposes described in this Policy. We do not use your Inputs or Outputs to train AI or machine-learning models without your explicit, separate consent. Inputs and Outputs are automatically deleted from our processing storage within 24 hours after processing is complete.

2. How We Use Your Information

We use the information we collect for the following purposes and, where required by law, on the following legal bases:

We do not sell your personal information to third parties.

3. How We Share Your Information

We may share your personal information with the following categories of recipients:

• Service Providers: Third-party vendors that help us operate the Service, including cloud infrastructure providers, customer support platforms, and analytics providers. These vendors are contractually bound to use your information only as directed by us.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.
• Legal Compliance: We may disclose your information when required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share your information for any other purpose with your prior consent.

We do not disclose your Inputs or Outputs to third parties except as necessary to provide, secure, troubleshoot, or enforce the requested Service, or as required by law. Service providers may process Inputs and Outputs on our behalf subject to applicable contractual and security obligations.

4. Data Retention

• Inputs and Outputs: Automatically deleted from our processing storage within 24 hours after processing is complete. Copies shown in the photo editor's recent history are stored in your browser for up to 1 day and can be removed by you sooner.
• Operational, Analytics, and Content-Safety Logs: Depending on the event, these records may include IP address, pseudonymous device and visit identifiers, job IDs, file metadata, image or result URLs, prompts or instructions, selected options, response metadata, error details, and moderation signals. These records are retained for up to 12 months, then aggregated or deleted, unless a longer period is required to investigate abuse, resolve a dispute, or comply with law.
• Browser Identifiers and Preferences: Stored until they expire, are rotated by the Service, or are cleared through your browser or device settings.

5. International Data Transfers

EnhancePhoto.ai is operated from servers that may be located in the United States and other countries. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in a country other than your country of residence.

For transfers of personal data from the EEA, UK, or Switzerland to countries not recognized as providing an adequate level of data protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses ("SCCs") or equivalent mechanisms. You may request a copy of any applicable transfer mechanism by contacting us using the details in Section 13.

6. Cookies and Tracking Technologies

We use cookies, pixel tags, local storage, and similar technologies (collectively, "cookies") to operate and improve the Service. You can find our full Cookie Policy at enhancephoto.ai/agreement/cookie-policy/.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Service to function (e.g., security and abuse-prevention controls such as CSRF protection). These cannot be disabled.
• Functional Cookies: Remember your preferences such as language selection and theme settings.
• Analytics Cookies: Help us understand how visitors use the Service (e.g., Google Analytics, Alibaba Cloud SLS). Depending on the event and configuration, analytics may be aggregated or may contain pseudonymous identifiers and data associated with a browser, task, or visit.
• Advertising Cookies: We do not display third-party advertising or use third-party advertising or targeting cookies on the Service.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that disabling certain cookies may affect the functionality of the Service. For more information, visit www.allaboutcookies.org.

The Service does not currently show third-party advertisements or use information collected through the Service to deliver interest-based advertising.

7. Security Considerations

The Site is configured to transmit service requests to HTTPS endpoints. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not available to children under the age of 16. If a user is 16 or older but has not reached the age of majority in their jurisdiction, their parent or legal guardian must review and agree to our Terms of Service on their behalf and supervise their use of the Service. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe a child under 16 has provided us with personal information, please contact us immediately at [email protected]. We will take steps to delete such information promptly.

9. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to certain exceptions.
• Restriction: Request that we restrict the processing of your information in certain circumstances.
• Portability: Receive your personal information in a structured, machine-readable format and transfer it to another controller.
• Objection: Object to processing based on our legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on your consent, withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Lodge a Complaint: File a complaint with your local data protection supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law and may need to verify your identity before fulfilling a request.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") grants you specific rights:

• Right to Know: The categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond the purposes permitted by CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a verifiable consumer request, contact us at [email protected].

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other business purposes. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, notify you by email or by posting a prominent notice on the Service prior to the change becoming effective. Your continued use of the Service after the effective date constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

If you are in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to contact your local data protection authority. A list of EU data protection authorities is available at edpb.europa.eu.