Privacy Policy

1. Information We Collect

Automatically collected: Anonymous visitor ID (stored in localStorage), session ID, browser language, device type, page views, scroll depth, and interaction events. We use Google Analytics 4 (GA4) for aggregated analytics.

Voluntarily provided: Email address (if you sign up through our paywall flow), images you upload for editing.

We do NOT collect: Your name, billing address, or payment card details. All payment data is processed directly by Paddle.com Inc., our Merchant of Record, in compliance with PCI DSS Level 1. NanoEdit never sees or stores card numbers.

2. How We Use Your Data

• Process your image edits using our AI pipeline
• Improve the quality and reliability of our service
• Send you product updates (only if you provided your email)
• Analyze usage patterns to improve the user experience
• Prevent abuse and enforce rate limits

3. Data Storage & Security

Uploaded and edited images are stored on Supabase (hosted on AWS) with signed URLs that expire. Analytics data is stored in a Supabase PostgreSQL database. We use industry-standard encryption for data in transit (TLS 1.2+) and at rest.

4. Third-Party Services

• Google Gemini API: Processes your images for AI editing. Images are sent to Google’s servers for processing.
• Google Analytics 4: Collects anonymous usage data.
• Google Ads: We use Google Ads remarketing to show relevant ads to previous visitors across Google’s Display Network, YouTube, and partner sites. Google may use cookies and identifiers to build remarketing lists. You can opt out at adssettings.google.com.
• Supabase: Hosts our database and file storage.
• Upstash Redis: Manages rate limiting.
• Vercel: Hosts our web application.
• Paddle.com Inc.: Our Merchant of Record for subscription billing and payment processing. Paddle handles all payment data and is responsible for collecting applicable sales tax/VAT. See Paddle’s Privacy Policy.

5. Data Sharing

We do NOT sell or rent your personal data. We share anonymous usage data with Google Analytics and Google Ads to measure traffic and show relevant ads to previous visitors. You can opt out of Google personalized advertising at adssettings.google.com.

6. Cookies & Local Storage

We use localStorage and sessionStorage (not traditional cookies) to store your anonymous visitor ID, session ID, edit count, and UI preferences. Google Analytics and Google Ads may set their own cookies for analytics and remarketing purposes. You can opt out of Google personalized advertising at adssettings.google.com or install the Google Analytics Opt-out Browser Add-on.

7. Your Rights

You may request deletion of your data by contacting us at support@nanoedit.ai. You may clear your local data at any time by clearing your browser storage. If you are in the EU/EEA, you have rights under GDPR including access, rectification, erasure, and data portability.

8. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy at any time. We will post the updated version on this page with a revised date.

10. Contact

OptiScale LLC, 30 N Gould St Ste N, Sheridan, WY 82801. Phone: (307) 533-4431. Email: support@nanoedit.ai