Introduction
Plain Upscaler respects your privacy. This Privacy Policy explains what information we collect when you interact with our website at https://plainupscaler.com, how we use that information, and the choices you have. By using the Service, you agree to the practices described here.
We process personal data as a controller within the meaning of applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Information We Collect
We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.
Information You Provide
- Account details. Name (or display name), email address, authentication records, and profile settings. Authentication credentials are handled through the account system; we do not need your password in support requests.
- Purchases. Billing address, transaction amount, and limited payment metadata provided by our payment processor. We never store full payment card numbers.
- Support requests. Messages you send to support, and any files or screenshots you choose to share.
- Generated content. Prompts, uploaded reference images, and AI-generated outputs saved to your account.
Information Collected Automatically
- Usage analytics. IP address, device type, browser, operating system, language preference, referral URLs, pages viewed, and time spent on the Service.
- Log information. System logs, error reports, and diagnostic data used for debugging.
- Cookies and similar technologies. Small data files stored on your device to maintain sessions, remember preferences, and measure performance. You can control cookies through your browser settings.
Information from Third Parties
- Payment processors. Creem, Stripe, or another approved payment processor may provide confirmation of successful or failed transactions, card type, and limited billing metadata.
- AI and media-processing providers. We send uploaded media, public media URLs, prompts, and processing settings to the provider selected to complete the requested generation or enhancement.
- Email delivery providers. Our transactional and marketing email providers may return delivery, bounce, complaint, and message status information.
- Analytics tools. We may use privacy-focused analytics services that report aggregated usage metrics.
How We Use Your Information
We process personal data for the following purposes:
- Provide, operate, and maintain the Service.
- Process orders, subscriptions, and credit purchases.
- Deliver generated outputs, enhanced media, and manage your workspace.
- Respond to customer support inquiries and send important transactional communications.
- Measure and improve reliability, usability, pricing, and product performance.
- Protect the Service against abuse, fraud, and security threats.
- Comply with legal obligations, tax requirements, and enforce our Terms of Service.
- With your consent, send product updates, promotions, or newsletters (you may unsubscribe at any time).
Legal Bases for Processing (EEA/UK Users)
When required, we rely on the following legal bases:
- Performance of a contract (providing the Service you requested).
- Legitimate interests (improving the Service, preventing fraud).
- Compliance with legal obligations (financial record keeping, responding to lawful requests).
- Consent (marketing communications, optional cookies).
Sharing Your Information
We only share personal data with:
- Service providers who assist with hosting, email delivery, analytics, payment processing, customer support, and moderation.
- AI and media-processing providers that receive the source media, prompt, and settings required to perform the task you request.
- Professional advisors (lawyers, accountants) as needed for compliance.
- Authorities when required by law or to protect rights, safety, or property.
- Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.
We do not sell your personal data.
Data Retention
We keep personal data only as long as necessary for the purposes described above. The criteria depend on the record and why it exists:
- Account details and generation records are kept while the account is active and while needed to provide account history, resolve disputes, maintain security, or complete a verified deletion request.
- Browser funnel events are scheduled for deletion after 180 days. Security, error, and provider logs may be kept for the period reasonably needed to diagnose incidents, prevent abuse, and establish transaction or credit integrity.
- Billing, transaction, refund, tax, and accounting records are retained for the period required by applicable financial and legal obligations.
- Uploaded and generated media may exist in managed storage and in third-party processing systems. Application cleanup jobs remove some generation files after their configured lifecycle, while other account-linked records may remain until an account or privacy request is completed. Provider-side copies follow the provider's own retention and legal requirements.
- Backups and duplicate records may remain until the applicable backup cycle expires, unless a longer hold is required for security, fraud, dispute, or legal purposes.
You may ask for the retention criteria applicable to a particular record or submit a deletion request through the privacy email below. We review retention rules as the product and provider set changes.
International Transfers
Our servers and service providers may be located in the United States and other countries. When transferring personal data across borders, we rely on approved safeguards such as Standard Contractual Clauses or the service provider’s certification mechanisms.
Your Rights
Depending on your location, you may have the right to:
- Access and obtain a copy of your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data when it is no longer needed.
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent for marketing communications at any time.
Submit requests by emailing email. We may need to verify your identity before fulfilling a request. If you are unsatisfied with our response, you may contact your local data protection authority.
Security
We implement technical and organizational measures appropriate to the risks of processing personal data, including encryption in transit (HTTPS), access controls, monitoring, and routine backups. No system is perfectly secure; you are responsible for safeguarding your login credentials.
Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us and we will take prompt action to delete it.
Links to Other Websites
Our Service may contain links to third-party sites. We are not responsible for the content or privacy practices of those sites. We encourage you to review their policies before providing personal data.
Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will post the revised document with an updated "Last Updated" date and, when appropriate, notify you via email or in-app message. Continued use of the Service after an update constitutes acceptance of the revised Policy.
Contact Us
If you have questions or concerns about privacy, please contact us:
- Privacy Email: email
- Support Email: email
For EEA or UK residents, you also have the right to lodge a complaint with your local supervisory authority.
