Privacy policy
Last updated: 2 September 2026
Controller
Alar LLC-FZ, licence no. 2537673.01, School Street 01, Damac The Distinction, unit 4502, Dubái, Emiratos Árabes Unidos. Privacy contact: info@alaruae.com.
What we process, why and for how long
| Data | Purpose | Retention |
|---|---|---|
| Image you upload | Processing it (providing the service) | While it is processed; deleted when done |
| Result and preview | So you can view and download it | 1 hour after download; 24 hours maximum |
| IP address | Hourly job limit, monthly free quota and security | Aggregate counters up to 40 days; technical logs 30 days |
| Credit code | Identifying your balance; not linked to your name | Until used up; stored in your browser (localStorage) |
| Email and payment data | Payment, invoice and refunds; processed by Paddle as merchant of record | Per Paddle's privacy policy |
Legal basis: performance of the contract (processing your image and selling you credits) and legitimate interest (security and abuse prevention). We do not profile you or make automated decisions with legal effects.
Who has access
- Cloudflare (website, API and ephemeral file storage; data centres in the EU and USA).
- RunPod (GPU processing; data centres in the EU and USA). The image is fetched through a single-use signed URL and removed from the process when done.
- Paddle (payments, invoices, VAT and refunds), as an independent controller of payment data.
Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses signed with each provider. We do not sell or share data with third parties.
Cookies and local storage
We use no cookies of our own and no cookie-based analytics. The site keeps the credit codes you buy in your browser's local storage so you don't have to copy them; you can clear them from your browser at any time. Paddle's checkout may use its own technical cookies.
Your rights
You can request access, rectification, erasure, restriction, portability or object by writing to info@alaruae.com. We reply within 30 days. If you are in the EU you may complain to your data protection authority. Because we don't store your images, erasure of content is automatic by design.
Children
The service is intended for people aged 16 or over. If we learn we hold a child's data without authorisation, we delete it.
Changes
Changes are published here with their date. Material changes are announced on the site itself.
Legal notice · Privacy · Terms of use · Refunds · Español