Privacy Policy

1. Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, password hash, OAuth provider identifiers.
• Usage data: pages visited, tools used, credit balance, job history, IP address, browser type, device information.
• Payment data: billing address, last-four card digits (stored by Stripe; we do not store full card numbers).
• User Content: images you upload for processing. Images are processed and then deleted from our servers within 24 hours unless you explicitly save them.
• Communications: any messages you send to our support team.

2. How We Use Your Data

We use your data to:

• Provide, operate, and improve the Service.
• Process payments and manage your credit balance.
• Send transactional emails (receipts, account notices).
• Send optional marketing emails (you may unsubscribe at any time).
• Monitor for abuse, security threats, and policy violations.
• Comply with legal obligations.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal bases for processing your personal data are:

• Contract performance: processing necessary to provide the Service you requested.
• Legitimate interests: security monitoring, fraud prevention, and Service improvement.
• Consent: marketing emails and non-essential cookies (you may withdraw consent at any time).
• Legal obligation: tax records, fraud investigations.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe: payment processing.
• Cloudflare: content delivery, DDoS protection, and AI inference.
• Resend / email provider: transactional and marketing emails.
• Analytics providers: aggregated, pseudonymized usage analytics.
• Law enforcement: when required by applicable law or valid legal process.

All third-party processors are bound by data processing agreements and may only use your data to perform services on our behalf.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Uploaded images are deleted within 24 hours of processing. Payment records are retained for [X] years as required by tax law. You may request deletion of your account at any time (see Section 6).

6. Your Rights

GDPR rights (EEA residents): You have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing based on legitimate interests and to withdraw consent at any time.

CCPA rights (California residents): You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, contact us at privacy@bgremoval.net. We will respond within 30 days (or as required by applicable law).

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. Where required, we use Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard such transfers.

8. Security

We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encrypted storage, and access controls. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Continued use after the effective date constitutes acceptance of the updated Policy.

11. Contact

Questions or requests regarding your data? Contact our Data Controller:

[Company Name]
Email: privacy@bgremoval.net
Website: bgremoval.net