Privacy Policy

Last Updated: September 19, 2026Effective Date: September 19, 2026

1. Introduction & Data Controller

This Privacy Policy applies to the Photo Editor website and all AI image generation services we provide (collectively referred to as the "Service"). We are the data controller of your personal data, and this Policy explains how we collect, use, share, protect your personal data, and the rights you have regarding your personal data.

The rights available to you depend on your location and the laws that apply to your data. Contact us if you need information about a specific processing activity or wish to make a data request.

By accessing or using our Service, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy.

2. Eligibility to Use Our Service

Our Service is exclusively for adults aged 18 and over. We strictly prohibit the registration, access, or use of our Service by minors (individuals under the age of 18). We do not knowingly collect personal data from minors. If you believe a minor has provided personal data, contact us so that we can review the account and address the applicable access and deletion requirements.

3. What Personal Data We Collect

We only collect the minimum necessary personal data to provide and optimize our Service, in line with the principles of lawfulness, fairness, and transparency.

3.1 Data You Directly Provide to Us

  • Account Registration Data: When you register an account via Google or email, we collect your email address and the unique identifier of your Google account. This data is used for account creation, identity verification, login management, and account security protection.

  • Service Usage Data: To provide our core AI image generation service, we process the editing instructions associated with your selected tool, reference images you upload, generated image content, and generation records.

    The selected image-processing provider receives your image and editing instructions to complete the task. Contact us for provider-specific data handling information before uploading sensitive images.

3.2 Data We Collect Automatically

When you access or browse our website, we automatically collect Device & Browsing Data (IP address, browser type, device type, operating system) and Cookie Data to ensure service security and optimize user experience.

3.3 Data Collected by Third Parties

We use Google Account for supported sign-in and Google Analytics for performance data. Google processes data under its applicable Privacy Policy. Our other processing providers are described below.

4. How We Use Your Personal Data

Service Operation

Providing AI image generation, account management, and credit recharges.

Security & Verification

Identity verification, fraud prevention, and protecting our platform.

Optimization

Analyzing user behavior to improve features and website stability.

Legal Obligations

Complying with judicial requests and regulatory mandates.

Customer Support

Responding to feedback, inquiries, and complaints.

5. How We Share & Disclose Your Personal Data

We do NOT sell, rent, or trade your personal data. We use Ali OSS for image storage, Supabase for authentication and database services, Kie AI and an image gateway for AI processing (including Recraft upscaling), Creem for payments, and Google services for login and analytics. The image-processing provider receives source-image URLs and the instructions needed for your selected edit. Provider retention and data use depend on the applicable service terms and configuration.

6. Cross-Border Data Transfer

Our service uses external storage, authentication, AI processing, analytics, and payment providers. Processing may take place outside your country. Contact us for information about the processing locations and transfer arrangements relevant to your request.

7. Data Retention & Storage

Uploaded originals: source images are stored in object storage and their URLs are sent to the selected processing provider. Closing the page or finishing an edit is not a promise of deletion.

Generated images: results may be copied to our storage or remain available through a provider URL. Generation records can include filenames, source and result URLs, task identifiers, status, and errors.

Account and transaction records: account details, credit activity, subscription and payment records are handled separately from image files. Some records may need to be retained for applicable legal or accounting obligations.

Logs, backups, and processing providers: these are separate data categories. This policy does not state a verified fixed deletion period for these copies or for stored images. We do not promise immediate deletion after processing or permanent deletion within 60 minutes.

To request deletion or confirm the retention period and scope relevant to your files or account, email nexorasg.ai@gmail.com. Request confirmation covering original images, generated images, account records, logs, backups, and provider copies as applicable.

8. Data Security

Image storage, account services, and processing rely on the providers described above. Contact us if you need information about the safeguards applicable to your files or account before uploading sensitive material. This policy does not promise a particular security certification or an absolute level of protection.

9. Your Rights

Depending on the law that applies to your data, your rights may include the following. The availability, conditions, and exceptions differ by jurisdiction; contact us to make a request or ask which rights apply.

Right to AccessRight to RectificationRight to ErasureRight to RestrictionRight to PortabilityRight to Object

10. Cookie Policy

We use cookies to maintain your login session and analyze site performance. You can manage cookie settings through your browser.

13. Contact Us

If you have any questions or wish to exercise your rights, please contact us at:
nexorasg.ai@gmail.com