Privacy Policy

Overview

This Privacy Policy explains how Images Upscaler (imagesupscaler.ai) collects, uses, shares, and protects personal information when you visit our website, create an account, process images, purchase services, submit a review, or contact us. It also explains the choices and privacy rights available to you.

In brief: we use information to provide and secure the service, process purchases, support customers, maintain accurate credit and account records, and improve the product. We do not sell personal information for money.

Information we collect

We may collect account details such as name, email address, username, authentication identifiers, profile image, registration and last-active dates, account status, subscription or plan status, preferences, and records of the permissions or choices you provide; images and processing instructions you submit; support messages and reviews; and technical information such as IP address, browser and device details, timestamps, requested pages, referrer, security events, cookies or similar identifiers, and service logs. Browser-storage observation may also record first-seen and last-seen metadata for an observed technology.

Guest and free-credit identifiers: We store a signed guest session in strictly necessary first-party local storage to provide monthly free credits and secure guest downloads. Our server keeps pseudonymous identifiers, credit periods, usage, and automatic links between matching browsers and verified accounts. Matching uses browser-exposed device signals together with the network address supplied by Cloudflare; retained matching keys are protected with a keyed hash. These identifiers can become associated with an account and are not fully anonymous. See Monthly free-credit linking below.

We collect and use your email address for account creation, email verification, account security, password resets, and essential service-related communications.

We collect information directly from you, automatically from your browser or use of the service, from administrators who manage credits or accounts, and from service providers involved in authentication, infrastructure, image processing, security, analytics, communications, or payments.

Google authentication: Google sign-in lets you create and access your Images Upscaler account. When you use Google authentication, the service may receive your first name, last name, email address, and Google profile picture or avatar, together with identifiers needed to authenticate and connect your account. We use information received from Google only to create, authenticate, and connect your Images Upscaler account. We do not use Google user data for advertising, sell Google user data, or disclose it for unrelated purposes.

Payment details are collected and processed by our authorised reseller and Merchant of Record, Paddle. We receive transaction and subscription identifiers, product or plan, price, status, dates, tax, refund, cancellation, chargeback, checkout email, and other limited customer information needed to provide and administer your purchase, but do not receive complete payment-card details.

Monthly free-credit linking

Each connected free-credit group receives one allowance of 10 free credits per month, including paid subscribers. We use a signed guest browser identifier, verified account identifiers, keyed and hashed matching keys, the effective credit month, usage totals, and job references to maintain one server-side balance. Reconciliation runs automatically; there is no linking code or manual sync step. Signing into an account connects that browser to the account. Signing into the same account on another browser or device connects its allowance too. Accounts used within an already connected browser share its free allowance, including after logout. Paid credits, subscriptions, and image ownership remain account-specific.

Automatic guest matching: To reduce repeated free allowances across browsers, the browser sends its screen dimensions, colour depth, reported processor count, touch-point count, and time zone. The server combines these with the operating-system family and language reported in request headers and the network address supplied by Cloudflare. Browser brand is not intentionally included. A keyed hash protects the resulting matching key; raw network addresses and raw device-signal values are not retained in the free-credit registry. Other operational providers may process network addresses as described elsewhere in this policy. We do not read hardware serial numbers, IMEI, or MAC addresses for matching.

Matching is an estimate, not proof of identity. Websites cannot reliably identify the same logged-out physical device across every browser. Network or VPN changes, browser privacy protections, changed settings, or missing signals can prevent a match. Different devices with similar signals on the same network can share a free quota. A shared IP address alone is not sufficient for this matching. Once a verified account or an automatic match connects records, those links persist after logout and network changes. You may contact us about an incorrect match or a privacy-rights request.

When previously separate groups are joined, their current-month usage is combined and the remaining allowance cannot exceed 10 credits. Account switching, another matching browser, or cleared storage does not add another allowance to an already recognised group. These identifiers are pseudonymous personal information where applicable, rather than fully anonymous information. We use them for service delivery, accounting, duplicate-grant prevention, and security, not cross-site advertising. The retention and privacy-rights provisions below apply.

Credits, plans, and billing history

We keep an itemised history of credit and plan activity. Each time credits are granted, purchased, renewed, added by an administrator, spent, returned, refunded, cancelled, charged back, or expired, a record may be added to the user credit ledger. This applies to welcome, free monthly, subscription, add-on, one-time, recurring, promotional, and manually awarded credits.

A ledger entry may include the date and time, event type and source, description, plan name, number of credits added or removed, balance and credit-category balances after the event, transaction, batch, subscription or other reference, checkout email, an administrative note, and related purchase or account status. We also keep current balances, allowances, grant and expiry dates, renewal or cancellation status, and the administrator change record, which may identify the acting administrator, affected user, before-and-after value, timing, scope, and reason or note.

This history is used to deliver credits and subscriptions, show and reconcile balances, investigate failed processing, prevent duplicate grants or deductions, administer refunds and chargebacks, detect fraud or misuse, answer support questions, resolve disputes, and meet financial, tax, accounting, and record-keeping obligations. Credit ledger entries are records of transactions and service delivery; they are not advertising profiles and are not sold. When an account is permanently deleted, its Individual User Credit Ledger is retained for 60 days and then permanently deleted.

Service, image, and activity records

When an image-upscaling request is made, we may record the account or guest identifier, batch identifier, start and end time, selected model and scale, processing status and detailed technical log lines, number attempted, completed, failed, or downloaded, credits charged or returned, and input file size and dimensions. Logs may also contain an IP address, user agent, referrer, request or security context, and error information. These records support processing, credit reconciliation, security, abuse and fraud prevention, support, refund review, troubleshooting, and service analytics.

Submitted images and processing instructions are handled to perform the requested service. Technical analytics may include image dimensions and file size, but we do not use the content of submitted images to create advertising profiles. Please do not upload images you are not entitled to use or unnecessary sensitive information.

Administrative pages and authorised access

Authorised administrators can use restricted tools to operate and protect the service. The names below describe administrative functions; they are not separate disclosures of information to the public.

User Logs: displays searchable account identity, batch and processing records, technical request context, error and credit details for support, security, abuse, fraud, and refund review.
Additional CSS: stores site presentation code entered by administrators. It ordinarily does not store customer personal information, although normal administrator access and security logs may still be generated.
Contact Us Admin: displays the user ID, name, email, category, subject, message, date, status, and administrator response associated with a support request.
Upscaler Analytics: reports totals and trends for batches, attempts, successes, failures, downloads, scale, file size, dimensions, credit availability, use, and expiry. Filters can distinguish guests, registered users, and administrators. Reports should be used in aggregated form where individual identification is not necessary.
User Credit Management: permits authorised staff to view and adjust a user balance and credit categories and records the change, timing, affected account, acting administrator, before-and-after values, and any note.
User Credit Records: displays scheduled and completed bulk or individual credit changes, including type, amount, target, administrator, timing, status, and notes.
User Plans and Consent: displays account email, registration and activity dates, plan and price information, account status, and the user's recorded product-update or offer preference. A marketing preference is used only in accordance with that choice and can be changed.
Reviews Analytics: displays the reviewer's account identity and email to administrators, submitted ratings, quality, ease, speed, recommendation score, use case, comment, display name choice, publication permission, approval status, and submission or update date. Email addresses are not published.

Access to these pages is limited to personnel with an operational need and protected by account permissions and, for certain functions, additional access controls. Administrative actions and ordinary hosting or security access may be logged. Staff must use this information only for the purposes described in this Policy.

How we use information

We use information to create and authenticate accounts; process and deliver image-upscaling requests; administer and document credits, purchases, refunds, chargebacks, plans, and subscriptions; respond to support messages; operate reviews and honour publication choices; provide service notices; prevent fraud, abuse, and security incidents; enforce applicable terms; troubleshoot and improve reliability; generate service analytics; comply with law; establish, exercise, or defend legal claims; and, where permitted, measure usage or send marketing communications.

We do not use sensitive personal information to infer characteristics about you, and we do not make decisions producing legal or similarly significant effects based solely on automated profiling. Automated checks may protect login, detect bots or abuse, validate eligibility, reconcile credits, or flag activity for review; an authorised person can investigate support, restriction, refund, and account issues.

Marketing communications

We may send you product updates, special offers, promotions, and other marketing communications only where you have chosen to receive them.

You may provide this consent when creating or registering an account on Images Upscaler or, where available, during checkout through Paddle.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails. Unsubscribing from marketing communications does not affect essential service emails, such as account, security, password reset, billing, or transaction-related messages.

Why processing is permitted

Where applicable law requires a legal basis, we rely on performance of a contract or steps requested before a contract to provide the service and administer purchases; legitimate interests in operating, improving, documenting, and securing the service, preventing fraud, supporting customers, and protecting legal rights; compliance with legal, tax, accounting, and regulatory obligations; and consent for optional analytics, marketing, public review display, or communications.

Where we ask for consent, you may refuse or withdraw it at any time without affecting earlier lawful processing. Where we rely on legitimate interests, we consider the need for the processing, its effect on individuals, and appropriate safeguards. You may object as described below.

International processing

We and our providers may process information in countries other than the country where you live. Those countries may have different privacy rules. Where required, we use recognised transfer safeguards, such as an adequacy decision, approved contractual protections, or another lawful transfer mechanism, and apply supplementary security measures where appropriate. You may contact us for more information about safeguards relevant to your information.

Retention and security

We keep personal information only for the service, support, security and legal purposes described in this policy.

Images: Uploaded and processed images are temporary and are normally deleted automatically within 48 hours. Download links do not extend this period. Deleting a batch or account blocks further access and removes its stored images. A job already running may need a short time to stop; late uploads are checked and removed.
Processing logs: Image-processing records expire 60 days after the batch was created. Account deletion or moving a record does not restart this period.
Account and credit history: After permanent account deletion, we keep a limited account record and the individual credit ledger for 60 days for support and reconciliation, then delete them, including archived copies. Unused credits are removed when the account closes.
Guest records: Inactive guest account details and history may be removed after 90 days. Usable credits, unresolved processing or disputes can require longer retention. Guest browser credentials can last up to one year and renew when used.
Free-credit matching: Protected matching identifiers and usage references may remain after logout or account deletion while needed to prevent repeated free allowances and misuse. They have no automatic expiry. They are pseudonymous, not fully anonymous; privacy rights and lawful retention exceptions still apply. They do not give access to another person's images or paid credits.
Reviews and support: Reviews remain until removed, the account closes, or they are no longer needed. Removal or withdrawal prevents further public display and removes older saved submission copies. Resolved support conversations are normally removed one year after resolution; reopening a request starts a new resolution period. Ongoing complaints, security matters, disputes and legal obligations may require longer retention.
Anonymous totals: We may keep daily usage totals that do not identify individual users for about one year to understand performance and costs.
Payments and necessary exceptions: Paddle keeps its own payment records under its Privacy Policy. We may retain limited information separately where needed for a specific refund, dispute, security incident or legal obligation, and delete or de-identify it when that reason ends. Browser storage follows our Cookie Policy.

Access to retained records is restricted. Backup copies expire through normal rotation and are used for recovery, not ordinary account access. No online service can guarantee absolute security; please protect your login credentials and contact us about suspected misuse.

Your rights and choices

Depending on where you live and subject to lawful exceptions, you may have rights to confirm whether we process your information; access or know the categories, sources, purposes, recipients, and specific information involved; correct inaccurate or incomplete information; delete information; restrict or object to processing; withdraw consent; receive a portable copy; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a refused request. You may also complain to the privacy or data-protection authority where you live or work. Exercising a privacy right will not result in unlawful discrimination or retaliation.

A request to delete information may not require deletion of records we must or are permitted to keep, for example to complete a transaction, maintain security, document credit or payment activity, meet financial or legal duties, resolve disputes, or establish legal claims. In those cases, we limit retained information to the relevant purpose and delete or anonymise it when that reason ends.

You may submit a request for yourself or, where permitted, through an authorised agent. We may ask for information reasonably necessary to verify identity, account ownership, authority, and the scope of the request. We will respond within the period required where you live and explain any applicable extension or refusal. There is ordinarily no charge, but a permitted fee or refusal may apply to manifestly unfounded, excessive, or repetitive requests.

You can link or unlink a social account through Account & Security → Connected accounts. To unlink Google, choose Google → Disconnect. Disconnecting Google stops using that Google account to sign in to Images Upscaler; it does not delete your Google account or automatically delete your Images Upscaler account or information.

Manage optional browser technologies through our Cookie Policy and privacy preference centre. Account, review-publication, and marketing choices may also be available in your account or in messages we send. You may request account deletion and associated personal information by contacting support@imagesupscaler.ai.

Children

The service is not directed to children who are not old enough to consent to online data processing in their location, and we do not knowingly collect their personal information without the authorisation required from a parent or guardian. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.

Contact and updates

Images Upscaler is responsible for the processing described in this Policy. To ask a privacy question, request the applicable contact or representative details, exercise a privacy right, or appeal our response, email support@imagesupscaler.ai. Please describe your request and the account email concerned; do not send passwords or complete payment-card details.

We may update this Policy as our service, providers, or legal obligations change. Material changes will be identified by the review date above and, where appropriate, communicated through the service or directly to account holders. If a change requires consent, we will request it before the relevant processing.