Privacy Policy

1. Information We Collect

Automatically collected: Anonymous visitor ID (stored in localStorage), session ID, browser language, device type, page views, scroll depth, and interaction events. We use Google Analytics 4 (GA4) for aggregated analytics.

Voluntarily provided: Email address (if you sign up through our paywall flow), images you upload for editing.

We do NOT collect: Full payment card numbers or card security codes. All payment data is processed directly by Stripe, our PCI DSS Level 1 payment processor. NanoEdit receives and retains only limited billing and anti-fraud metadata such as customer ID, payment intent / charge IDs, card brand, last-4, billing country / postal code, checkout consent state, and dispute-related evidence needed to prevent fraud, support customers, comply with law, and respond to card-network disputes.

2. How We Use Your Data

• Process your image edits using our AI pipeline
• Improve the quality and reliability of our service
• Send you product updates (only if you provided your email)
• Analyze usage patterns to improve the user experience
• Prevent abuse and enforce rate limits

3. Data Storage & Security

Uploaded and edited images are stored on Supabase (hosted on AWS) with signed URLs that expire. Analytics data is stored in a Supabase PostgreSQL database. We use industry-standard encryption for data in transit (TLS 1.2+) and at rest.

4. Third-Party Services

• Google Gemini API: Processes your images for AI editing. Images are sent to Google’s servers for processing.
• Google Analytics 4: Collects anonymous usage data.
• Google Ads: We use Google Ads remarketing to show relevant ads to previous visitors across Google’s Display Network, YouTube, and partner sites. Google may use cookies and identifiers to build remarketing lists. You can opt out at adssettings.google.com.
• Supabase: Hosts our database and file storage.
• Cloudflare: Hosts our web application and rate-limiting infrastructure.
• Stripe: Handles card processing, billing, receipts, and certain fraud / dispute signals on our behalf. OptiScale LLC is the seller of record and is responsible for applicable taxes.

5. Data Sharing

We do NOT sell or rent your personal data. We share anonymous usage data with Google Analytics and Google Ads to measure traffic and show relevant ads to previous visitors. You can opt out of Google personalized advertising at adssettings.google.com.

6. Cookies & Local Storage

We use localStorage and sessionStorage (not traditional cookies) to store your anonymous visitor ID, session ID, edit count, and UI preferences. Google Analytics and Google Ads may set their own cookies for analytics and remarketing purposes. You can opt out of Google personalized advertising at adssettings.google.com or install the Google Analytics Opt-out Browser Add-on.

7. Your Rights

You may request deletion of your data by emailing privacy@nanoedit.ai. You may clear your local data at any time by clearing your browser storage. If you are in the EU/EEA, you have rights under GDPR including access, rectification, erasure, and data portability.

8. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy at any time. We will post the updated version on this page with a revised date.

10. Payments, Fraud & Disputes

To operate subscriptions and digital credit purchases, we retain limited checkout, billing, device, network, and usage records associated with a transaction. This can include IP address, user agent, Stripe session / payment IDs, plan or pack purchased, billing country / postal code, and evidence showing when credits were delivered or used. We use this information to fulfill purchases, investigate fraud, process refunds, and respond to payment disputes or chargebacks.

11. Contact

OptiScale LLC, 30 N Gould St Ste N, Sheridan, WY 82801. General: support@nanoedit.ai. Privacy requests (GDPR, CCPA): privacy@nanoedit.ai.