Privacy Policy

We process the following categories of data.

• Account data, your email address, a securely hashed password, your plan and your account settings
• Photos and results, the photos you process at full resolution and the enhanced files we return
• Billing data, your plan, billing period, invoice details you enter such as a business name and tax number, and a reference to your payment; our payment processor holds the card details and we never see your full card number
• Team data on Studio, names and email addresses of seats, roles, single sign-on identifiers and the audit log of actions
• API data, API key identifiers, request logs, webhook addresses and image or batch ids
• Support data, the content of emails you send us
• Technical data, IP address, browser type, device type, pages visited and error logs, kept in a form that does not use cookies for tracking

The free preview runs in your browser. The photo you use for the preview is not uploaded to us. To limit misuse of the preview we keep a one-way hash of your IP address for a short time.

We use only strictly necessary cookies: a session cookie that keeps you signed in, a security token that protects forms against cross-site request forgery, and a preferences cookie that remembers choices such as monthly or yearly billing in the price list. These cookies are needed for the site to work, so we do not show a consent banner. We use cookieless analytics that count visits in aggregate without identifying you, and we do not use advertising pixels, cross-site trackers or social media tracking scripts.

• To create and run your account and process your photos, because it is necessary to perform our contract with you
• To charge for your plan, issue invoices and keep accounting records, because it is necessary for the contract and required by tax and accounting law
• To send service emails such as sign-up codes, receipts, batch notifications and important changes, as part of the contract
• To keep the service secure, prevent fraud and abuse and enforce our terms, based on our legitimate interest in a safe service
• To measure site use in aggregate and improve the product, based on our legitimate interest, using cookieless analytics
• To answer your support requests, based on the contract or our legitimate interest in helping you

We do not use your photos to train or improve AI models, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

• Photos and results, deleted automatically 30 days after processing, or earlier when you delete them or ask us to
• Account data, for as long as your account is open, then deleted within 30 days of closing it, except what we must keep by law
• Invoices and billing records, for the period required by tax and accounting law
• Audit logs and API request logs, up to 12 months
• Technical logs and the preview IP hash, up to 30 days
• Support emails, up to 24 months after the conversation ends

We share data only with service providers who process it on our behalf under contracts that require confidentiality and security, and only to the extent they need. By category, these are a hosting provider, a payment processor, an email delivery provider and AI processing infrastructure that runs the enhancement of your photos. We may also disclose data when the law requires it, to protect our rights or users, or as part of a transfer of the service, in which case this policy continues to protect your data. We do not sell or rent personal data and we do not share it for cross-context behavioral advertising.

Our service and some of our providers operate in the United States and other countries. When personal data of people in the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission, together with additional security measures.

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect, use and disclose, to request deletion and correction, to opt out of the sale or sharing of personal information (we do not sell or share it), to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. Residents of other US states with privacy laws have similar rights.

To use any right, email [email protected] from the address on your account. We may ask you to confirm your identity before acting on the request. You can also delete photos yourself from your history at any time.

UnblurPicture is not directed to children, and we do not knowingly allow anyone under 16 to create an account. If you believe a person under 16 has given us personal data, write to [email protected] and we will delete it.

We use encryption in transit and at rest, strict access control, logging of administrative access and automatic deletion of photos after 30 days. More detail is on our security page. No system is perfectly secure, and if a breach affects your personal data we will notify you and the authorities as the law requires.

We may update this policy when our service or the law changes. We will post the new version on this page with a new date, and for important changes we will also tell you by email before they take effect. Related documents are our terms of service and our refund policy.