Privacy Policy

Effective Date

Effective Date: June 3, 2026 Last Updated: August 23, 2026

1. Introduction

This Privacy Policy explains how AIUpscaler.video ("we," "us," or "our") collects, uses, stores, and shares your personal data when you use our AI video upscaling service at aiupscaler.video (the "Service"). By creating an account or using the Service, you acknowledge the practices described here.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Your email address
• A display name (optional)
• Profile data returned by Google when you sign in via Google (if used)

2.2 Video Files You Upload

To deliver the upscaling service, we process:

• Source video files you upload (MP4, MOV, and other supported formats)
• Output (upscaled) video files we produce for you
• Task metadata: upscaling settings chosen, resolution selected, frame-rate target, credit cost, processing duration, and timestamps

We do not use your uploaded video files to train AI models.

2.3 Usage and Technical Data

We collect certain data automatically:

• Pages visited, features used, and interaction events
• IP address, user-agent string, and basic device or browser identifiers
• Coarse location (city or region) inferred from IP address
• Referring URL, if your browser sends one

2.4 Payment Information

All new credit-pack purchases are processed by Stripe. PayPal remains enabled only to administer existing PayPal subscriptions and their related billing transactions; it is not offered for new purchases. AIUpscaler.video does not store full card numbers, bank credentials, or payment account passwords. We retain only what is needed to manage your access: subscription plan, billing period dates, transaction IDs, and credit balance. The processors' own policies govern financial data.

2.5 Support Communications

If you contact us by email or another channel, we retain the content of that communication to resolve your request.

2.6 Feedback Submissions

If you use the in-app Feedback button, we collect the feedback type (Feature Request, Bug Report, Billing Issue, or Other), the text you write, and, if you attach any, up to five screenshots. If you submit feedback while signed out, we also collect the contact email address you provide so we can follow up; if you are signed in, we use your account email instead and do not ask for a separate one. Feedback screenshots are stored privately and are never publicly accessible — only authorized staff can view them. See Section 7 for how long we keep this data.

3. How We Use Your Information

We use the data we hold to:

• Operate the Service and deliver upscaled video results to you
• Route your uploaded files to our third-party AI inference infrastructure for processing (see Section 6)
• Manage your account, subscription status, and credit balance
• Send transactional email: verification codes, one-time login links, payment receipts, and important service notices
• Respond to support requests
• Diagnose failures, monitor performance, and improve reliability
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Cookies and Analytics

We use cookies and similar storage technologies for authentication, session management, preference storage, analytics, and security.

4.1 Essential Cookies

Essential cookies are required for the Service to function. They help us keep you signed in, authenticate your requests, maintain security state, and process tasks. You cannot opt out of essential cookies without breaking core account and payment functionality.

4.2 Analytics Cookies

We use Google Analytics 4 and Microsoft Clarity to collect aggregate usage data, such as page views, session duration, feature engagement, navigation patterns, and usability signals. These tools help us understand how visitors use AIUpscaler.video and improve the Service. We do not sell personal information.

You can control or delete cookies through your browser settings. You may also use tools such as the Google Analytics opt-out browser add-on or browser-level "Do Not Track" / privacy controls where available.

4.3 Marketing Cookies

AIUpscaler.video does not currently use marketing or retargeting cookies. If we introduce them in the future, we will update this Privacy Policy and request consent where required by applicable law.

5. How We Share Information

We disclose personal data only in these circumstances:

• Service providers and processors: companies that host, secure, store, analyze, authenticate, charge, or run AI inference on our behalf. They process data only under our instruction and consistent with this Policy.
• Legal and safety: when required by law, court order, or regulatory authority; or when needed to protect the rights, property, or safety of AIUpscaler.video, our users, or the public.
• Business transfers: in a merger, acquisition, financing, or asset sale, user data may transfer as part of that transaction, subject to confidentiality obligations.

We do not sell personal information.

6. Third-Party Services

The Service relies on the following providers, each subject to its own privacy policy:

• fal.ai — third-party AI inference infrastructure that runs upscaling models on uploaded video files
• WaveSpeed — third-party AI inference infrastructure that runs upscaling models on uploaded video files
• Topaz Labs — third-party AI inference infrastructure that runs enhancement models on uploaded video files
• Google Cloud (Cloud Run) — server-side transcoding that converts supported legacy containers into a standard MP4 before AI processing
• Cloudflare — hosting, object storage (R2), CDN, and network security
• Neon — managed database for account, subscription, and task records
• PayPal — retained only to administer existing PayPal subscriptions and their related billing transactions
• Stripe — the payment provider for new credit-pack purchases and existing Stripe subscriptions
• Resend — transactional email delivery
• Google — Google sign-in (OAuth) and Google Analytics
• Microsoft Clarity — session analytics

Which inference provider handles a given job depends on the model you select and on the job's length; a single upload is sent to one provider, not to all of them. Legacy container formats are transcoded first, so those uploads pass through Google Cloud Run before reaching an inference provider.

7. Data Retention

Deleting your account immediately disables account access and active sessions. We delete or anonymize general account-profile data within 30 days.

The single-task deletion audit records only that an authenticated deletion request was accepted. The download-response preparation record means that our authenticated Worker obtained an upstream 200/206 response body and prepared an attachment response for one task output. It does not prove that a browser received the first byte, completed the transfer, saved, or opened the file. Neither record contains the video, prompt, filename, object key, download URL, IP address, or user-agent string.

We retain and use limited billing, transaction, service-delivery, security, fraud-prevention, refund, chargeback, and dispute records only to the extent necessary to comply with our legal obligations, resolve disputes, prevent fraud and abuse, maintain the security and integrity of the Service, and enforce our agreements and policies.

If a payment, chargeback, fraud, or legal dispute remains unresolved, routine deletion or anonymization of relevant records may be suspended until the matter is resolved. When such a hold closes, the affected deletion-audit and download-response preparation records are retained for at least 30 additional days after closure before routine deletion resumes. Information retained for these purposes is not used for marketing or to restore access to a deleted account. The same hold-and-delay logic applies to Feedback submissions connected to an unresolved dispute: the 180-day routine deletion is paused, and the record is deleted at least 30 days after the dispute closes.

We maintain a restricted PostgreSQL ledger of Legal Hold case operations. It contains limited operation metadata and opaque internal case, target, and operator references; it does not contain Feedback text, contact email, or screenshots. An active case is retained until its first effective release. After that release, the entire case ledger is retained for at least 210 days from the first effective release and until every later persisted manual-review deadline has expired. Each persisted manual-review event is retained for 210 days from its creation; a request that fails before an event is written creates no ledger record. Once no hold remains active and every event in the case has reached its deadline, a controlled process deletes the entire case ledger, including its case and idempotency mappings. We do not retain a permanent linkable tombstone. The ledger is append-only while retained; it is not a permanent WORM archive.

This 210-day metadata-ledger period does not extend the 180-day retention period for Feedback text, contact email, or screenshots, nor the post-release deletion schedule described above. Those materials are deleted under their own schedule once no active hold requires suspension.

When we no longer have an ongoing legitimate business or legal need to process personal information, we will delete or anonymize it or, where immediate deletion is not reasonably possible, securely store and isolate it from further processing until deletion is possible.

8. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request that inaccurate or incomplete data be corrected
• Deletion: request deletion of your personal data, subject to lawful retention requirements
• Portability: receive an export of your data in a structured, machine-readable format (where applicable)
• Objection or restriction: object to or ask us to limit certain types of processing
• Withdrawal of consent: withdraw consent where our processing is based on consent, without affecting the lawfulness of prior processing

CCPA (California) — additional rights: California residents may request disclosure of the categories and specific pieces of personal information we have collected, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it. California residents also have the right to request deletion and the right to opt out of the "sale" of personal information. We do not sell personal information.

How to exercise rights: Email support@aiupscaler.video from the address associated with your account so we can verify your identity. We will respond within the timeframe required by applicable law.

9. International Data Transfers

AIUpscaler.video and its service providers operate globally. Your data may be processed in the United States and other countries. Where such transfers require specific safeguards under applicable law (such as GDPR), we rely on appropriate legal mechanisms including standard contractual clauses or equivalent measures.

10. Security

We apply reasonable technical and organizational safeguards, including encrypted data transmission, scoped access controls, short-lived presigned URLs for file access, and access logging. No internet-facing service can guarantee absolute security.

11. Children's Privacy

The Service is not directed at children under 13 (or under 16 in jurisdictions where a higher age threshold applies). We do not knowingly collect personal data from anyone under those ages. If you believe a child has created an account or submitted data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Policy as the Service evolves. Material changes will be communicated via in-app notice or email before they take effect. The "Last Updated" date at the top of this page always reflects the current version.

13. Contact Us

Email: support@aiupscaler.video Website: https://aiupscaler.video