Legal
Privacy Policy
Last updated: August 21, 2026
1. Information We Collect
Account data: When you sign in with Google OAuth, we receive your name, email address, and profile picture from Google. We store only the information necessary to create and maintain your account.
Images and videos: Image uploads are processed for the requested edit and are not retained by us as a permanent media library. AI Video Enhancer uploads source videos directly to temporary fal.ai storage for Topaz processing; source files expire after 24 hours. Enhanced video outputs use a private provider-CDN access policy and expire after seven days.
Usage data: We log enhancement jobs (mode used, credit cost, timestamp) for billing accuracy and abuse prevention. We do not sell or share this data with third parties.
Guest sessions: If you use AIEnhance.io without signing in, we create an anonymous session tied to a browser ID cookie. No personally identifiable information is collected for guest sessions.
First-party attribution: We store a coarse first and latest traffic source (such as direct, organic search, referral, affiliate, or a named UTM campaign), the referring domain, landing path, and time so we can connect anonymous product sessions, registration, invoice creation, and payment. This internal record does not contain raw advertising click IDs, a full referrer URL or search query, uploaded content, IP address, or email address. Advertising attribution remains subject to the marketing-consent rules below.
Marketing data: If you have opted in to marketing cookies via our cookie banner, we may share a hashed (irreversibly encrypted) version of your email address with Google Ads for audience matching, so we can show you relevant ads about our service on Google's network. The hashed email cannot be reversed to identify you. You can opt out at any time via the "Cookie Settings" link in our footer. With the same consent, Meta Pixel and Meta Conversions API may process website and conversion events, browser identifiers, IP address, device information, hashed email/account identifiers, and purchase or subscription details to measure Meta ad performance and support retargeting. We never send your uploaded images or editing prompts to Meta.
2. How We Use Your Information
- To provide and improve our AI enhancement services
- To process payments and manage your subscription via Monobank
- To credit your account accurately after successful enhancements
- To send transactional emails (billing receipts, subscription renewals)
- To detect and prevent fraud and abuse of the free tier
- To measure our first-party acquisition, registration, invoice and payment funnel by coarse traffic source
- To measure ad performance and reach you with relevant ads on Googleโs and Metaโs networks (subject to your marketing cookie consent)
We do not use your images to train AI models.
3. Cookies
We use the following types of cookies and similar technologies:
- Essential cookies: required for authentication (NextAuth session), guest sessions (browser ID), and storing your cookie preferences. Always active.
- Functional first-party cookies: preserve your coarse traffic source across registration and checkout so invoice and payment cohorts remain accurate. Always active.
- Analytics cookies (with your consent): Google Analytics 4 and Microsoft Clarity for usage statistics, session recordings, and heatmaps.
- Marketing cookies (with your consent): Google Ads, Google Signals, and Meta Pixel for conversion measurement, audience measurement, and retargeting. With Google Signals enabled in our GA4 property, we may associate your visit with your Google account if you are signed in and have consented to ad personalization in your Google account settings.
| Cookie / storage | Provider | Category and purpose | Typical lifetime |
|---|---|---|---|
| aienhance_consent | AIEnhance.io | Essential โ stores your cookie choices and their version. | 12 months |
| aienhance_guest_id | AIEnhance.io | Essential โ maintains an anonymous guest session and credit balance. | 12 months |
| next-auth.session-token / __Secure-next-auth.session-token | AIEnhance.io / NextAuth | Essential โ keeps signed-in users authenticated. | Up to 30 days |
| NEXT_LOCALE | AIEnhance.io | Functional โ remembers your selected language. | 12 months |
| aienhance_ref | AIEnhance.io | Functional โ preserves referral attribution after a referral-link visit. | 90 days |
| aienhance_attribution | AIEnhance.io | Functional, HttpOnly โ preserves coarse first/latest traffic source, campaign, referring domain and landing path for the internal registration and billing funnel; excludes raw ad click IDs and full referrer URLs. | 90 days |
| _ga / _ga_* | Google Analytics | Analytics โ distinguishes users and preserves session state; set only with analytics consent. | Up to 2 years |
| _clck / _clsk | Microsoft Clarity | Analytics โ associates page views with a pseudonymous user and session; set only with analytics consent. | Up to 1 year / 1 day |
| _fbp / _fbc | Meta | Marketing โ supports Meta ad measurement, click attribution and retargeting; set only with marketing consent. | Up to 90 days |
| aienhance.meta_attribution (sessionStorage) | AIEnhance.io | Marketing โ temporarily preserves fbclid and UTM campaign attribution for checkout and consented CAPI events. | Until the browser tab/session ends |
Actual lifetimes may be shortened by your browser or changed by the relevant provider. Meta Conversions API does not itself place a browser cookie; with marketing consent, it uses the identifiers and event data described above for server-side measurement.
You can change your cookie preferences at any time via the "Cookie Settings" link in our footer. Outside the EEA/UK, marketing and analytics cookies are enabled by default; inside the EEA/UK, both require explicit consent via our cookie banner.
4. Third-Party Services
We use the following third parties to operate our service:
- Google OAuth โ identity and authentication
- Replicate โ AI model inference and output storage
- fal.ai โ image generation, temporary media storage, and Topaz Starlight video processing
- OpenRouter โ Nano Banana (Gemini) and GPT image generation
- Monobank โ payment processing and subscription management
- Railway โ application hosting and database
- Google Analytics 4 (with Google Signals enabled) โ usage statistics and audience measurement (subject to your marketing cookie consent)
- Google Ads โ advertising performance measurement and audience matching for retargeting (subject to your marketing cookie consent; we share hashed email addresses for Customer Match)
- Meta Pixel and Conversions API โ browser- and server-side website event and advertising performance measurement for Meta ads and retargeting (subject to your marketing cookie consent)
- Microsoft Clarity โ session recordings and heatmaps (anonymized, subject to your analytics cookie consent)
Each provider has their own privacy policy governing their data handling.
5. Data Retention
Account data is retained as long as your account is active. Enhancement job logs are kept for 90 days for billing dispute resolution. Credit ledger entries are kept for 12 months for tax and compliance purposes. AI video source files expire after 24 hours and enhanced video files after seven days; job metadata may remain in the billing log without the media. You can request account deletion by emailing [email protected].
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at [email protected]. We will respond within 30 days.
7. Security
We use HTTPS for all data transmission, bcrypt hashing for any sensitive tokens, and environment-variable-based secret management. Database access is restricted to our application server. We conduct periodic security reviews and address vulnerabilities promptly.
8. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance.
Questions?
Email us at [email protected] and we'll respond personally.