Privacy Policy

Uploaded images and temporary processing

An image is transferred to the analysis endpoint only after you press Analyze Image. The application decodes the file in server memory to inspect format, dimensions, metadata, file structure, compression-related properties, and sampled pixel statistics. It does not intentionally write the uploaded image to permanent application storage, create a public result URL, or make the image available to other users.

The processing buffer exists only for the request lifecycle and becomes eligible for release when the response completes. Hosting infrastructure may temporarily hold network data as part of ordinary request handling; site operators should review their host’s data-processing terms before production use.

Data retention and server logs

The application does not maintain an image database. The analysis response is returned to the requesting browser and is not associated with an account. Basic in-memory rate-limit counters may temporarily store a network identifier and request count. They expire automatically and are not designed for cross-device tracking.

Infrastructure providers may record operational logs such as time, request path, response status, approximate network address, or user agent for security and reliability. Image contents should not be logged by the application. Production operators should configure log retention according to applicable law and organizational policy.

Contact form data

The contact form collects name, email address, subject, and message. When RESEND_API_KEY and CONTACT_EMAIL are configured, those fields are transmitted to the configured email service and recipient for support handling. When email delivery is not configured, the application validates the form but explicitly stores nothing.

Do not include confidential images, credentials, medical records, government identifiers, or other sensitive material in a support message. The operator should delete support correspondence when it is no longer reasonably required.

Cookies, analytics, and third parties

This version does not require an account and does not set application analytics or advertising cookies. Essential cookies may be introduced by hosting or security infrastructure where necessary to deliver and protect the service. If optional analytics are added later, this policy and the Cookie Policy should be updated before collection begins.

Third-party services may include the selected hosting provider and, when configured, Resend for contact email. Their processing is governed by their own terms. The image-analysis route does not send uploaded images to external generative AI providers.

User rights and children’s privacy

Depending on location, users may have rights to access, correct, delete, restrict, or object to processing of personal data. Because image analyses are not linked to an account or retained by this application, the operator generally cannot retrieve an earlier anonymous report. Contact messages can be addressed through the configured privacy email after reasonable identity verification.

The service is not directed to children under 13. Minors should use it only with appropriate adult or institutional guidance and should never upload images they are not permitted to process.

Security, changes, and contact

Controls include allowlisted formats, signature checks, a 10 MB limit, decoder pixel limits, filename sanitization, safe error messages, and basic rate limiting. No internet service can guarantee absolute security, so users should avoid submitting highly sensitive material.

Material policy changes will be reflected by a new effective date. Questions or rights requests may be sent to privacy@theaifinding.com.

Questions about this page