Prelaunch policy draft

Privacy Policy

Public release gate: verified operating entity, postal address, privacy contact, production inference provider, transfer details, retention evidence, and browser storage inventory must be completed before launch.

Scope

This policy covers this website, image-processing requests, fixed-choice feedback, and support communications.

Information processed

The service may process uploaded and generated images, coarse job metadata, security and network logs, fixed-choice feedback, necessary browser storage, and support communications. Photos may contain personal information. We do not perform face recognition.

How information is used

Information is used only to provide the requested service, secure it, diagnose errors, produce coarse aggregate analytics, and meet legal obligations. Images are not used to train models, displayed publicly, sold, or used for advertising.

AI and service providers

Production images will be processed through Cloudflare infrastructure and an approved inference provider. Production inference remains disabled until provider no-training, retention, deletion, human-review, transfer, and contract terms are verified. The provider identity and policy link must be added before launch.

Retention and deletion

Images are retained only as long as needed for processing and short-term delivery. The technical design targets short terminal delivery and an absolute safety limit, but a precise public period will be stated only after storage, cache, queue, log, and provider deletion is tested end to end. “Deleted” is shown only after verified cleanup.

Security

Planned controls include private object storage, TLS, short-lived signed links, single-job capability access, and data-minimized logs. No system can promise absolute security.

Your choices and rights

Applicable law may provide access, correction, deletion, portability, appeal, and authorized-agent rights. The verified request channel must be added before public launch.

Children

The service is not directed to children under 13. A verified contact path for deletion requests must be added before launch.

Contact and changes

This draft intentionally does not publish placeholder personal or legal contact details. Public launch is blocked until verified entity, address, and domain-based privacy contact are supplied.