Privacy Policy

What we collect

• Account data: your name and email.
• Usage data: images processed, tokens used, API calls, and IP address for rate limiting.
• Billing data: plans are invoiced directly by us. No third-party payment processor is involved, and we never see or store card numbers.
• Submitted images: stored in your archive, deletable by you at any time.
• Legal consent records: when you accept the Terms of Service and Privacy Policy, we record the acceptance, the document versions you accepted, the exact date and time, your IP address, and your browser information, and we keep that record as proof of consent.

Why we collect it

To operate the service, process your images, bill correctly, prevent abuse, and provide support. We collect what the service needs to work, and not more.

What we do not do

We do not sell your data.

We do not use your images to train models.

We do not share your data with third parties for advertising.

Your content, your responsibility

Everything you submit to the service is processed at your direction and on your behalf. You represent and warrant that you own, or have all rights, licenses, and permissions necessary to submit, every image and every piece of data you send us, and that submitting it is lawful. We do not review, verify, or take any responsibility for the legality, accuracy, or content of what you submit or of the output produced from it. Any claim arising from your content or your use of the output is yours alone, as set out in the Terms of Service.

Data retention

• Account data: kept while your account is active.
• Submitted images: kept until you delete them or close your account.
• Legal consent records: kept while your account is active and for as long afterwards as we reasonably need them to prove consent and defend our legal position.
• Logs: retained for a reasonable operational window, then deleted.

Your rights

You have the right to access, rectify, delete, export, and object to the processing of your data. You also have the right to lodge a complaint with a data protection authority.

To exercise any of these, submit a data request. A human processes it.

Sub-processors

We use a small set of service providers to run AIUnmark. Each is listed here with its purpose. We choose them carefully, but they are independent companies: their handling of data is governed by their own terms and policies, and we are not liable for their acts or omissions. Payments are invoiced directly by us, so no payment processor appears in this list.

Security

Data is encrypted in transit over HTTPS, and encrypted at rest where the infrastructure provides it. API keys are stored hashed. No system is perfectly secure, but we aim for strong baseline practices.

Cookies

We use minimal first-party cookies for session and basic operation. We do not use third-party advertising cookies. If we add analytics later, we will document it here.

International transfers

Your data may be processed in the US and the EU through our sub-processors. Where required, we rely on appropriate safeguards for those transfers.

Changes to this policy

We can update this policy. We give notice on material changes. The last-updated date at the top reflects the current version.

Contact

Questions about privacy? Email [email protected], use the contact page, or submit a data request.