Privacy Policy

1. Introduction

This Privacy Policy describes how Jewels Retouch, operated by Serdar Arniyazov ("we", "us", or "our"), collects, uses, and protects your personal information when you use our AI-powered jewelry photo retouching service ("the Service").

We are committed to protecting your privacy and handling your data responsibly. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: Used for account authentication and communication
• Name: Optional, used for personalization
• Password: Stored securely using industry-standard hashing

2.2 Payment Information

Payment processing is handled by LemonSqueezy, our third-party payment processor. We do not store your full credit card number or payment details. We receive:

• Transaction IDs and payment status
• Billing country for pricing purposes
• Customer ID for subscription management

2.3 Images and Content

When you use the Service, we process:

• Uploaded images: Jewelry photos you submit for processing
• Reference images: Style references you upload
• Generated images: Output images created by our AI

2.4 Usage Data

We automatically collect:

• IP address and approximate location (country level)
• Browser type and device information
• Pages visited and features used
• Processing history and timestamps

3. How We Use Your Information

We use your information to:

• Provide the Service: Process your images using AI technology
• Account management: Authenticate users and manage accounts
• Payment processing: Charge for services and manage billing
• Communication: Send service updates, receipts, and support responses
• Improvement: Analyze usage patterns to improve the Service
• Security: Detect and prevent fraud or abuse
• Legal compliance: Meet legal obligations and respond to lawful requests

4. Image Data Handling

Your images are handled with care:

• Images are processed on secure servers using third-party AI services (Google Gemini)
• Uploaded images are stored in Cloudflare R2 secure storage
• We do NOT use your images to train AI models without explicit consent
• You may delete your images at any time through your account
• Images may be retained for a limited period for service delivery and dispute resolution

5. Data Sharing

We share your data only with:

5.1 Service Providers

• Google (Gemini AI): For image processing and generation
• Cloudflare R2: For secure image storage
• LemonSqueezy: For payment processing
• Railway: For application hosting

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

We do NOT sell your personal information to third parties.

6. Data Security

We implement appropriate security measures including:

• HTTPS encryption for all data transmission
• Secure password hashing using bcrypt
• Access controls and authentication for all systems
• Regular security reviews and updates

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data.

7. Data Retention

• Account data: Retained until you delete your account
• Processed images: Retained until you delete them or your account
• Payment records: Retained for 7 years for tax and legal compliance
• Usage logs: Retained for up to 90 days for security and debugging

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and associated data
• Export: Download your images and data
• Withdraw consent: Opt out of non-essential data collection

To exercise these rights, please contact us through our Contact Page.

9. Cookies and Tracking

We use cookies for:

• Essential cookies: Authentication and session management
• Preference cookies: Language and display settings

We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings.

10. International Data Transfers

Your data may be processed in countries outside your residence. Our service providers (Google, Cloudflare, Railway) operate globally. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending an email. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy-related questions or to exercise your rights, please contact us through our Contact Page.