Your privacy isour priority
We're committed to protecting your personal information and being transparent about how we collect, use, and protect your data.
Last updated: December 24, 2024
Privacy at a Glance
Data Encryption
All data is encrypted in transit and at rest using industry-standard encryption
Auto-Deletion
Processed images expire after 30 days on our servers
Data Residency
Choose where your data is processed and stored (EU, US, or other regions)
Information We Collect
Account Information
When you create an account, we collect your email address, name, and encrypted password. This information is necessary to provide you with our services and manage your account.
Images and Files
We temporarily process the images you upload to remove backgrounds. These images are stored securely during processing and expire after 30 days.
Usage Data
We collect anonymized usage statistics to improve our service, including processing times, success rates, and general usage patterns. This data cannot be linked back to individual users.
Analytics and Website Usage
We use Umami Analytics, a privacy-focused, cookieless analytics service, to collect anonymized information about how you use our website. This includes pages visited, time spent on pages, browser type, and device information. Umami does not use cookies, does not track you across websites, and cannot identify individual users. This data is collected based on our legitimate interest in understanding how our service is used and improving user experience.
Payment Information
Payment processing is handled by trusted third-party providers (Stripe). We do not store your credit card information on our servers.
How We Use Your Information
Service Provision
Your images are processed using our AI models to remove backgrounds. We do not use your images for any other purpose, including training our models or any form of analysis beyond background removal.
Account Management
We use your email address to send important account notifications, billing information, and service updates. You can opt out of marketing emails at any time.
Service Improvement
We analyze aggregated, anonymized usage patterns to improve our service performance and user experience. This data cannot be traced back to individual users.
Legal Compliance
We may use your information to comply with legal obligations, resolve disputes, and enforce our terms of service.
Data Security & Protection
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your images and personal information are protected with industry-leading security measures.
Access Controls
Access to your data is strictly limited to authorized personnel who need it to provide our services. All access is logged and monitored.
Data Retention
Processed images expire after 30 days. Account data is retained as long as your account is active, or as required by law.
Incident Response
We have comprehensive security incident response procedures. In the unlikely event of a data breach, we will notify affected users within 72 hours.
Data Residency & International Transfers
We offer data residency options to ensure your data is processed and stored in your preferred region:
- European Union: Full GDPR compliance with data processing in EU data centers
- United States: Processing in US data centers with privacy shield compliance
- Other Regions: Additional regions available upon request for Business plan users
Data transfers between regions are conducted using approved mechanisms such as Standard Contractual Clauses and with appropriate safeguards in place.
Your Rights & Choices
Access & Portability
You have the right to access your personal data and request a copy in a portable format. Contact us to request your data.
Correction & Deletion
You can update your account information at any time through your account settings. You can also request deletion of your account and all associated data.
Marketing Communications
You can opt out of marketing emails at any time by clicking the unsubscribe link in our emails or updating your preferences in your account.
Data Processing Objection
You have the right to object to certain types of data processing. Contact us to discuss your specific concerns.
Cookies & Tracking
We are committed to a privacy-first approach and minimize the use of cookies on our website. We use only essential cookies for website functionality and a limited set of cookies for customer support and affiliate tracking, based on our legitimate business interests.
Essential Cookies (Always Active)
These cookies are necessary for the website to function and cannot be disabled:
- Authentication session cookies (next-auth.session-token): Required for login and account management
- CSRF protection cookies (next-auth.csrf-token): Security measure to prevent unauthorized actions
- User preference cookies (theme, language): Store your interface preferences for a better experience
Analytics - Cookieless Approach
We use Umami Analytics, a privacy-focused, cookieless analytics platform. Umami collects only anonymized usage statistics without using cookies or tracking you across websites. This includes:
- Pages visited and features used (no personally identifiable information)
- Device type, browser, and operating system (anonymized)
- Approximate geographic location (country level only)
- Referral source (how you found our website)
Because Umami is cookieless and does not collect personal data, no consent is required under GDPR. You cannot be identified or tracked as an individual user. Learn more about Umami's privacy approach at https://umami.is/privacy
Customer Support Cookies (Legitimate Interest)
We use Tawk.to live chat to provide customer support. This service sets the following cookies to maintain chat sessions and provide a better support experience:
- TawkConnectionTime: Tracks when you first connected to chat
- __tawkuuid: Identifies your chat session to maintain conversation history
- twk_idm_key: Helps us route your messages to the right support agent
These cookies are used based on our legitimate interest in providing customer support (GDPR Article 6(1)(f)). You can disable the chat widget or clear these cookies through your browser settings at any time. This will not affect other site functionality.
Affiliate Tracking (Legitimate Interest)
We use Endorsely for affiliate tracking to properly attribute referrals and compensate partners who refer customers to us. This is based on our legitimate interest in operating an affiliate program. Endorsely may set cookies to track referral sources. Learn more at https://endorsely.com/privacy
No Third-Party Advertising or Cross-Site Tracking
We do NOT use:
- Social media tracking pixels (Facebook, Twitter, etc.)
- Advertising cookies or retargeting
- Third-party data brokers or data sharing for marketing
- Cross-site tracking or user profiling
- Google Analytics or other invasive tracking tools
Your Rights and Choices
You have the following options to control cookies and tracking:
- Browser Settings: Block or delete cookies through your browser settings (note: this may affect site functionality)
- Opt-Out: Contact us at privacy@clearcutout.com to opt out of support chat cookies or affiliate tracking
- Do Not Track: While we don't use invasive tracking, you can enable "Do Not Track" in your browser
- Data Deletion: Request deletion of any data collected about you by contacting our privacy team
If you have concerns about our use of cookies or wish to exercise your rights, please contact our Data Protection Officer at privacy@clearcutout.com
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information immediately.
Parents or guardians who believe their child has provided us with personal information should contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:
- We will update the "Last updated" date at the top of this policy
- We will notify users by email of significant changes
- We will provide a summary of changes in our notification
- Continued use of our service constitutes acceptance of the updated policy