Privacy Policy

How we protect and handle your data when using NanoImg services

2025/09/10

Introduction

Welcome to NanoImg's Privacy Policy. This document explains how we collect, use, and protect your personal information when you use our AI-powered image editing services.

Not Affiliated Notice: NanoImg is an independent product and is not affiliated with or endorsed by any model provider (e.g., Nano Banana, OpenAI, Replicate). Any references are for compatibility or technical attribution only. This privacy policy applies only to NanoImg services.

Controller: NanoImg (see the Contact Page for our current business address). Support & Privacy Contact: [email protected] (we respond within 3 business days).

Information We Collect

Personal Information

  • Account Information: Name, email address, and password when you register
  • Profile Data: Optional profile picture and preferences
  • Contact Information: Details you provide when contacting our support team

Usage Data

  • Service Usage: Information about how you interact with our image editing tools
  • Processing History: Records of images processed (temporarily stored for service delivery)
  • Performance Metrics: Aggregated/anonymous usage statistics to improve our services

Technical Information

  • Device Information: IP address, browser type, operating system, and device identifiers
  • Log Data: Server logs, error reports, and security incident logs
  • Cookies: Session and preference cookies (see our Cookie Policy for details)

How We Use Your Information

Service Delivery

  • Process and edit your images using our AI tools
  • Provide customer support and respond to inquiries
  • Maintain and improve service performance and reliability
  • Send important service notifications and updates
  • Comply with legal obligations and regulatory requirements
  • Detect, prevent, and address fraud, security issues, and technical problems
  • Protect the rights and safety of our users and services
  • Send newsletters and promotional content (you can opt out at any time)
  • Analyze usage patterns to improve our services

Where the GDPR applies, we process your personal data on one or more of the following legal bases:

  • Contract: To provide and support the services you request
  • Consent: For optional features such as newsletters or certain analytics
  • Legitimate Interests: To secure, maintain, and improve our services (balanced against your rights)
  • Legal Obligations: To comply with applicable laws and requests from authorities

Data Sharing and Third Parties

We DO NOT sell your personal data or share it for cross-context behavioral advertising.

We may share data with:

  • Payment Processors: e.g., Stripe or Creem (depending on your region and plan)
  • Infrastructure & Providers: Cloud hosting, storage, email, analytics (only as needed to run the service)
  • Legal Requirements: When required by law, court order, or regulatory authorities
  • Business Transfers: In case of merger, acquisition, or asset sale (with notice)

AI Processing

  • Image processing may use third-party AI services (e.g., Nano Banana model APIs, OpenAI, Replicate) to perform transformations you request.
  • Model Training: We do not use your content to train our models or third-party models unless you explicitly opt in. Where supported, we pass provider-level “no-training” flags.
  • Providers process inputs/outputs only to deliver the requested operation; we implement safeguards and contractual controls to protect your data.

Data Retention and Deletion

  • Account Data: Retained while your account is active (and as required by law thereafter)
  • Processed Images: Temporarily cached for 24–48 hours, then automatically deleted
  • Backups: May be retained for up to 90 days for disaster recovery
  • Legal Hold: Data may be retained longer if required by legal obligations

You can request deletion of your account and related data at any time (see Your Rights below).

Your Rights (GDPR/CCPA)

Subject to applicable law, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and data
  • Portability: Export your data in a machine-readable format
  • Objection/Restriction: Object to or request restriction of certain processing
  • Marketing Choices: Withdraw consent for marketing communications

To exercise these rights, email [email protected] or contact us. We will respond within 3 business days for privacy requests and billing/chargeback inquiries.

Security Measures

  • Encryption: Data encrypted in transit (HTTPS) and at rest
  • Access Controls: Least-privilege access and authentication
  • Regular Audits: Security assessments and vulnerability testing
  • Incident Response: Procedures for detecting, reporting, and remediating security events

International Transfers

Your data may be transferred to and processed in countries outside your residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to protect your rights.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting updates on this page
  • Sending email notifications for material changes
  • Providing in-app notifications

Contact Us

For privacy-related questions or to exercise your rights: