Privacy Policy

1. Who is responsible

The controller of this website is Siteboard SL (hereinafter "Imagefy" or "the Service"), with registered address at Av. Cerdanyola 75, planta 1, 08172 Sant Cugat del Vallès, Barcelona, Spain.

VAT ID: ESB44717692. Email: hola@imagefy.ai.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What we collect

You can browse the site without giving us anything. Data reaches us in three ways: automatically, because you give it to us, or through the payment provider.

• Automatically: technical data needed to serve the site — IP address, browser and device type, language and the time of the request — plus error logs.
• Because you give it to us: your name and email address when you create an account, and the files you upload to use the tools.
• Through Stripe: we are told that a payment succeeded, along with the card brand, the last four digits and the invoice. We never see the full card number: it is typed inside a Stripe frame and never reaches our servers.
• We do not use Google Analytics or any other analytics or advertising service, and there are no third-party trackers on the site.

3. Your images

Background removal, upscaling, magic eraser and uncrop run entirely inside your browser. The AI model is downloaded to your device and the image is processed there: for those tools, the pixels are never sent anywhere.

The AI tools — generation, ads, logos, baby predictor and restoration — cannot work that way. There, the file is uploaded to our storage so that our servers can process it.

The file is also uploaded when you drop it on a landing page, so it is waiting for you inside the dashboard. Nobody else can reach it: every file is served through a signed link that expires.

We do not use your images to train any model, and we do not show them to anyone else.

4. Why we process it, and on what legal basis

• To provide the service you asked for — process files, keep your credit balance, deliver results. Basis: performance of the contract.
• To bill and to keep the accounting records the law requires. Basis: performance of the contract and legal obligation.
• To send you service emails: confirm your address, recover your password, tell you a job finished. Basis: performance of the contract.
• To keep the service secure and prevent abuse. Basis: our legitimate interest in running a service that works.
• To send you commercial emails, only if you ask us to. Basis: your consent, which you can withdraw at any time.

5. How long we keep it

• Photos you upload without an account: 7 days, then deleted automatically.
• Photos you upload with an account: 30 days, then deleted automatically. Two days before, we email you.
• What the AI generates for you: it stays while your account exists, because you paid for it. You can delete any of it whenever you want from Assets, and it goes from our storage for good.
• Account data: while your account exists. Deleting the account deletes your files and everything you generated, and cancels any subscription on the spot.
• Invoices and payment records: the period required by Spanish tax and commercial law, which is six years.
• Sessions: 30 days without use, then the session expires.

6. Who else sees it

We do not sell your data and we do not share it for advertising. It reaches only the providers needed to run the service, all of them bound by a data processing agreement:

• OVHcloud (France) — servers and file storage. Data stays in the European Union.
• Stripe Payments Europe, Ltd. (Ireland) — payment processing and invoicing.
• Resend (United States) — sending service emails. Transfers are covered by the European Commission's standard contractual clauses.
• We may also disclose data when a law or a court requires it.

7. Your rights

You can ask us to access, rectify or delete your data, to restrict or object to its processing, and to receive it in a portable format. Write to hola@imagefy.ai from the address of your account, or delete your account yourself from Settings.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

8. Age

The Service is not intended for people under 14. If you are under 14, do not create an account. If we learn that an account belongs to someone under that age, we will delete it.

9. Security

Passwords are stored hashed, never in plain text. Session tokens are kept as a hash: a copy of our database is not enough to impersonate you. Files travel over HTTPS and are only reachable through signed links that expire.

No system is perfectly safe. If a breach ever affects your data, we will tell you and the supervisory authority within the deadlines the law sets.

10. Changes

If this policy changes in a way that affects you, we will say so on the site before it takes effect. The date at the top always tells you which version you are reading.