Images Upscale

Privacy Policy

What Images Upscale collects, why, who processes it for us, how long it is kept, and how to reach us about your data.

Last updated: September 26, 2026

Who we are

This policy covers images-upscale.com ("Images Upscale", "we", "us"). For any privacy question or request, email support@images-upscale.com.

Information we collect

Images and results: the files you upload, the results we generate, and job details such as scale, mode, size and status.

Account details: if you sign in with Google, we receive your email address, display name, profile picture and Google account ID. We never see your Google password.

Purchases: order details from our payment provider, such as your email, the pack, amount, currency, country for tax purposes and order IDs. Card details are entered on the provider's checkout page; we never receive your full card number.

Usage and device data: IP address, browser and device type, pages visited, and actions such as starting a job or opening checkout. IP addresses are kept in short-lived rate-limit records deleted within a day; the daily free-credit limit per network stores only a one-way hash of the IP.

Gift center: your check-ins and claimed gifts, your invite code and which new accounts joined through it, and any rating or comment you send us.

Support: the emails you send us and our replies.

How we use it

To run the service: process your images, show your history and workspace, count free and purchased credits, deliver purchases and handle refunds.

To keep it safe: enforce rate limits and credit limits, detect fraud, promotion abuse and misuse, and moderate content where our payment provider requires it.

To improve it: understand which features people use, where jobs fail and how fast pages load. We do not sell your personal data, and we do not use your images to train AI models.

Cookies and analytics

We use cookies that keep you signed in, keep a guest session, protect the sign-in flow, and remember an invite code for 30 days when you arrive through an invite link. The site also stores a few preferences in your browser, such as a dismissed banner.

We measure usage with Google Analytics and with Umami, an analytics tool we host ourselves. Umami also records how pages are used, such as clicks, scrolling and page layout, to produce heatmaps and session replays; these recordings stay on our own analytics server and are not linked to your account. Our Umami tracking honours your browser's Do Not Track setting, and you can block analytics with browser settings or extensions without losing any feature.

Storage and retention

Guest uploads and results are deleted after 7 days. Results in a signed-in account stay in your workspace until you delete them, one at a time or in bulk, or delete your account. Deleted files are removed from storage right away; copies cached by our content delivery network can take a little time to expire.

Account, purchase, credit and support records are kept while your account exists and afterwards as long as needed for tax, accounting, fraud prevention or legal reasons. Analytics data is kept only as long as it is useful for understanding trends.

Who processes data for us

Image processing: fal.ai (upscaling, unblurring, background removal), with Replicate as a backup when fal is unavailable, and OpenRouter with Google Gemini for image descriptions, prompts and text extraction. Each receives only the image and settings needed for the job.

Infrastructure: Railway (hosting and database), Cloudflare (file storage and delivery through R2, DNS and email forwarding), Google (sign-in and Google Analytics).

Payments: Creem, which acts as merchant of record for credit pack purchases and handles checkout, tax and invoices. Waffo may also process payments for some checkouts; if so, it is named on the checkout page.

These providers act on our instructions and only as needed to deliver the service, secure it or meet billing and legal requirements. Some are based in the United States, Singapore or elsewhere, so your data may be processed outside your country, with contractual safeguards where the law requires them.

Your rights and choices

You can delete your results at any time from your workspace, use the service without an account, and ask us to access, correct, export or delete your personal data, or to delete your account. Depending on where you live, including the EU, the UK and California, you may also have the right to object to or restrict some processing and to complain to your data protection authority.

Send requests to support@images-upscale.com. We may need to confirm that the account is yours before changing or deleting anything, and we answer within 30 days.

Children

Images Upscale is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Security and changes

Traffic to the site is encrypted with HTTPS, access to our systems is restricted, and payment card data never reaches our servers. No method of transmission or storage is completely secure, so we cannot promise absolute security.

We may update this policy as the service changes. The date at the top shows the latest version, and material changes will be announced on the site.