Privacy Policy

1. Information we collect

• Account data — email and authentication details when you sign in (via our auth provider), plus plan, subscription status, and usage-related fields stored in our database.
• Payment data — checkout and subscription events processed by Paddle. We store plan entitlements and Paddle identifiers; card details are handled by Paddle, not stored on our servers.
• API keys & usage — keys you create and request metadata needed for rate limits and abuse prevention.
• Contact messages — name, email, category, and message body you submit, stored so we can respond. We may email a copy to our support inbox.
• Technical logs — approximate IP (for rate limiting), user agent, and error/event signals needed to operate and secure the service.
• Analytics — site usage via Vercel Analytics and, when configured, Google Analytics / Tag Manager. See our Cookie Policy.

These features are optional and explicit. We do not use your images to train general-purpose public AI models.

We use trusted processors to run ImageOptimizer, including:

• Hosting / edge — Vercel (app hosting, Web Analytics)
• Database & auth infrastructure — Supabase
• Payments — Paddle (merchant of record / checkout)
• Email — Resend (transactional and support notifications)
• AI naming — vision provider used only when you trigger AI SEO renaming
• Object storage — temporary staging for cloud export jobs where required
• Cloud providers you connect — Google, Dropbox, Microsoft, under their terms

4. Your role & our role

For images and content you process, you remain responsible for having the rights to use that content. ImageOptimizer provides tools and infrastructure; we do not monitor every file for legality. Where we process personal data for accounts, billing, and support, we do so to provide and improve the service, prevent abuse, and meet legal obligations.

5. Retention & your rights

We retain account, billing, and support records as long as needed to operate the service, handle disputes, and comply with law. Temporary export staging and AI request payloads are not intended as long-term image archives. Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us to exercise those rights.

6. Children

ImageOptimizer is directed at professionals and businesses. We do not knowingly collect personal information from children under 16.

7. Changes

We may update this policy as the product evolves. The effective date above will change when we do. Continued use after updates means you accept the revised policy.