Privacy Policy

1. Information We Collect

1.1 Account Information

• Email address
• Name (optional)
• Password (encrypted)

1.2 Billing Information

• Payment details are processed by Stripe and not stored on our servers
• Billing address
• Transaction history

1.3 Usage Data

• Features used
• Processing history (counts only, not content)
• Quota usage
• Login timestamps

1.4 Technical Data

• IP address
• Browser type and version
• Device information

2. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Process your uploads and generate outputs
• Manage your account and subscription
• Process payments
• Send service-related communications
• Respond to support requests
• Improve our service
• Comply with legal obligations

We do NOT:

• Sell your personal data
• Use your uploaded content for any purpose other than processing
• Share your data with advertisers
• Access your content except to provide the service

3. Data Handling

3.1 Image Processing

• Images are processed entirely in your browser using client-side technology
• Your image files are NEVER uploaded to our servers
• Original files remain on your device at all times
• Processed outputs exist only in browser memory until you download them

3.2 Video Processing

• Videos are uploaded to Transloadit (our processing partner) for server-side resizing
• Processing flow: Your browser → Transloadit → Processed file returned
• Transloadit automatically deletes files from their CDN within approximately 24 hours
• We do NOT store any copy of your videos on servers we control

3.3 Download & Output Files

• Images: Generated in your browser, zipped locally, downloaded directly
• Videos: Fetched from Transloadit's temporary CDN, zipped in your browser, downloaded
• All processed results exist only in browser memory until download completes

3.4 No History / Re-download

• We do not maintain a history of your processed files
• Once you close your browser tab, all processed files are gone
• There is no re-download capability — you must re-upload and re-process
• This is by design: we minimize data retention for your privacy

4. Data Processors

We use the following third-party services:

4.1 Supabase (Database & Authentication)

• Stores account data and usage statistics
• Privacy: supabase.com/privacy

4.2 Stripe (Payment Processing)

• Processes subscription payments
• Stores payment methods securely
• Privacy: stripe.com/privacy

4.3 Transloadit (Video Processing)

• Processes video files on our behalf
• Files are deleted after processing
• Privacy: transloadit.com/legal/privacy

5. Data Retention

6. Data Security

We implement industry-standard security measures:

• TLS/SSL encryption for data in transit
• Encrypted storage for sensitive data
• Access controls and authentication
• Secure cloud infrastructure

7. Account Deletion

7.1 How to Delete Your Account

You can delete your account at any time from Account Settings → Danger Zone → Delete Account. You will be asked to type "DELETE" to confirm.

7.2 What Happens When You Delete

• Your account is immediately deactivated
• You are signed out and cannot log back in
• Active subscriptions are cancelled (no refunds for prepaid periods)
• Your access to Aspectr is permanently removed

7.3 Data Deleted Immediately

• Authentication credentials (you cannot log in)
• Active session data
• Subscription access

7.4 Data Retained (24 Months)

The following data is retained for 24 months after deletion:

• Account information (email, name, company)
• Usage history and statistics

This retention is necessary for:

• Fraud prevention and abuse detection
• Service improvement and analytics
• Legal compliance and dispute resolution

7.5 Data Retained (7 Years)

• Billing records and transaction history (tax/legal requirement)

7.6 Right to Earlier Erasure

If you require immediate and complete data erasure before the 24-month period, contact privacy@aspectr.app. We will process valid erasure requests within 30 days, subject to legal retention requirements.

8. Your Rights

Depending on your location, you may have the right to:

• 8.1 Access — Request a copy of your personal data
• 8.2 Rectification — Correct inaccurate personal data
• 8.3 Erasure — Request deletion of your personal data (see Section 7)
• 8.4 Portability — Receive your data in a portable format
• 8.5 Objection — Object to certain processing of your data
• 8.6 Withdraw Consent — Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@aspectr.app.

9. GDPR Compliance (EEA Users)

For users in the European Economic Area:

9.1 Legal Basis

We process your data based on:

• Contract performance (providing our service)
• Legitimate interests (improving our service)
• Legal obligations (tax records)

9.2 International Transfers

Data may be transferred to the United States. We ensure appropriate safeguards through Standard Contractual Clauses.

10. Cookies

10.1 Essential Cookies Only

We use essential cookies for:

• Authentication
• Session management
• Security

10.2 We Do Not Use

• Advertising cookies
• Third-party tracking cookies

11. Children's Privacy

Aspectr is not intended for users under 18 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

13. Contact

For privacy-related questions: