Summary: PicRefresh processes your images to perform the tools you request. Uploaded files are stored temporarily and deleted within 24 hours. We do not sell your data to third parties.
1. Who We Are
PicRefresh ("we", "us", "our") is an image processing service operated under Novascriber, accessible at picrefresh.com. We provide browser-based and server-side image tools including compression, format conversion, cropping, animation, and more.
This Privacy Policy explains how we collect, use, and protect information about you when you use our website and services.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and optionally a display name, provided via our authentication provider (Clerk). We do not store your password directly.
2.2 Usage Data
We automatically collect limited technical data when you use our service:
- IP address and approximate geographic region (country/city)
- Browser type, operating system, device type
- Pages visited, features used, and timestamps
- Tool call counts for quota enforcement
2.3 Files You Upload
When you use server-side tools (e.g., format conversion, animation), you upload files to our infrastructure. See Section 4 for how these are handled.
2.4 Payment Information
We do not collect or store credit card numbers or bank details. Payment is handled entirely by PayPal. See Section 5.
2.5 Communications
If you contact us by email or support form, we retain those communications to resolve your inquiry.
3. How We Use Your Information
- Provide the service — process your images, track daily quota usage, deliver results.
- Account management — authenticate you, manage your subscription, send transactional emails (receipts, subscription confirmations).
- Service improvement — analyse aggregate usage patterns to improve tool performance and reliability.
- Security — detect abuse, fraud, and violations of our Terms of Service.
- Legal compliance — comply with applicable laws and respond to lawful requests.
We will not use your data for advertising or sell it to third parties.
4. File Processing & Storage
4.1 Browser-side tools
Some tools (image compression, cropping, format conversion for common formats) run entirely in your browser using WebAssembly and JavaScript. No files are uploaded to our servers for these operations.
4.2 Server-side tools
Tools such as video-to-animation, batch processing, and eBook conversion require files to be uploaded to our servers. When you use these tools:
- Your file is uploaded to our object storage (Cloudflare R2 or equivalent).
- The file is processed by our worker services.
- The processed output is made available to you via a temporary signed URL.
- All uploaded and processed files are automatically deleted within 24 hours.
4.3 No training use
We do not use uploaded files to train machine learning models or any AI systems.
5. Payments & PayPal
We use PayPal to process subscription payments. When you subscribe:
- You are redirected to PayPal's secure checkout page.
- Payment processing, card data, and billing details are handled entirely by PayPal under their own Privacy Policy.
- We receive a subscription confirmation token and billing status from PayPal — we do not receive your full card number or bank account details.
- We store your subscription plan, billing interval, and renewal status to manage your access.
6. Sharing Your Information
We share minimum necessary data with the following third-party providers to operate the service:
We do not sell, rent, or share your personal data with advertisers or data brokers.
We may disclose information if required by law, court order, or to protect the safety of users or the public.
7. Data Retention
- Uploaded files — deleted within 24 hours of processing.
- Account data — retained for as long as your account is active, plus 30 days after deletion.
- Billing records — retained for 7 years as required by financial regulations.
- Usage logs — retained for up to 90 days for security and debugging purposes.
8. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and associated data (excluding legally required records).
- Portability — request your data in a machine-readable format.
- Objection / Restriction — object to or restrict certain processing activities.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
9. Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit.
- Short-lived signed URLs for file access.
- JWT-based authentication with short expiry.
- Principle of least privilege for internal service access.
No method of transmission or storage is 100% secure. We will notify affected users in the event of a data breach as required by law.
10. Children's Privacy
PicRefresh is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us: