Privacy Policy for OneUpscaler

1. Information We Collect

1.1 Information you provide

We may collect the following information directly from you:

• Email address
• Login credentials through Google OAuth or similar providers
• Billing information (handled by third party processors such as Stripe and PayPal)
• Uploaded images for processing
• Support inquiries and communication messages

1.2 Information collected automatically

When you use the Service, we automatically collect:

• IP address
• Browser type and operating system
• Time zone
• Pages or features you access
• Device identifiers
• Error logs and performance metrics

1.3 Information from third party providers

If you use Google Sign In or similar identity services, we may receive:

• Your email
• Your name
• Profile image (if you choose to share it)

We only request the minimum scopes required for authentication.

2. How We Use Your Information

We use your information for the following purposes:

• To operate and maintain the Service
• To authenticate your account
• To process and upscale your images
• To deliver purchased services
• To detect and prevent fraud
• To provide customer support
• To improve and optimize the Service
• To comply with legal requirements

Your images are never used to train AI models.

3. Image Processing and Storage

3.1 Ownership

You retain full ownership of all images you upload.

We never claim rights over your content.

3.2 Storage and deletion rules

We store images on Cloudflare R2, which is GDPR compliant.

• Free upscaled images are stored for no longer than 24 hours.
• Paid upscaled images are stored for up to 14 days, even if you do not delete them manually.
• If you delete an image, it is permanently removed from active storage and scheduled for automated irreversible deletion.
• Metadata related to job status or billing may remain as required for accounting and security.

3.3 Automated deletion

When the deletion time is reached, files are automatically removed from Cloudflare storage and cannot be recovered.

4. Legal Basis for Processing (GDPR)

We rely on the following lawful bases:

• Contractual necessity for providing the Service
• Legitimate interest for platform security and fraud prevention
• Compliance with legal obligations
• Your consent for optional features such as marketing emails

5. Sharing of Information

We do not sell your data.

We may share your data only with:

• Cloudflare R2 for storage
• Stripe or PayPal for payments
• Google for OAuth authentication
• Logging and monitoring services for stability
• Legal authorities when required by law

Each third party processes data according to its own privacy policy and is contractually obligated to protect your data.

6. Data Retention

We keep your personal data only as long as necessary to:

• Provide the Service
• Fulfill legal obligations
• Resolve disputes
• Enforce our agreements

If you delete your account, we remove all personal information except that required for financial auditing or legal compliance.

User initiated deletion of credits does not qualify for refunds and does not affect our retention obligations.

7. Security

We use industry standard security controls to protect your data, including:

• TLS encrypted transport
• At rest encryption via Cloudflare R2
• Access control and credential isolation
• Automated audits and monitoring

No system is completely secure, but we apply commercially reasonable safeguards to protect your information.

8. Your Rights (GDPR and Global Privacy Rights)

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict or object to processing
• Export your data
• Withdraw consent at any time
• File a complaint with a supervisory authority

You can exercise these rights by contacting us.

9. Children's Privacy

The Service is not intended for individuals under 13.

We do not knowingly collect personal data from children.

If you believe a child has provided us data, contact us and we will remove it promptly.

10. International Transfers

Your information may be transferred to servers or service providers located outside your country.

These transfers follow GDPR approved mechanisms such as Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy occasionally.

The "Last Updated" date indicates when the latest version came into effect.

Your continued use of the Service constitutes acceptance of the updated policy.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: support@oneupscaler.com