Privacy Policy

Marc Granell Beltrán (trading as "Naiara AI"), Tax ID (NIF) 54030354M, address Calle Linares 21, 4º puerta 7, 46018 Valencia (Spain).

Contact email: [email protected]. Phone: +34 615 87 48 95.

This policy applies to the Naiara website and to the Naiara desktop app for Windows, whether you download it from the website or from the Microsoft Store.

Account data: name, email address and password (stored encrypted); if you sign up with Google, the name, email and profile photo provided by Google.

Service-usage data: the photos you upload, the images generated as a result, your restoration history, the credit balance associated with your account and, where applicable, the status of your Naiara Plus subscription.

Converter and PDF tool files: the files you send to be converted or processed, from the website or the desktop app, and the results generated. These tools can be used without an account. We also record anonymous operational statistics (number of jobs, success or failure and duration per tool or format pair), with no files, file names, content or user identity.

Text sent to the PDF studio's AI features: if you are a Naiara Plus subscriber and ask for a summary, a translation or a suggestion from the editor's text assistant, the document's text or the text you have selected.

Payment data: credit packs and the Naiara Plus subscription are paid for through Stripe (for the subscription, also with Apple Pay or Google Pay), which processes your card details directly. We never store your full card number.

Technical data: IP address, preferred language, and cookies (see the Cookie Policy).

Desktop app data: the Windows app stores locally on your computer only its settings, the list of recent jobs and a technical log that does not include file contents. If you sign in to it with your Naiara account, the session is also stored on your computer.

Support communications: the content of any messages you send us through the support ticket system or when reporting an issue with a result.

Browsing data: pages visited, time spent, device, browser and approximate location (country, region and city) derived from your IP. It is only linked to your browser or account if you accept analytics.

Tool use: which tool you use, the formats, an approximate file size, whether the job succeeds and whether you download the result. Never the name or content of your files. If you accept analytics, also where you click and where the mouse travels on public pages (heatmaps), added up per page and day, with no identifier, for 90 days.

Providing the image-restoration service you request — legal basis: performance of a contract.

Providing the file conversion service and PDF tools you request, on the website or in the desktop app — legal basis: performance of a contract (providing the service requested).

Generating the PDF studio summaries, translations and text suggestions you request as a Naiara Plus subscriber — legal basis: performance of a contract.

Managing your user account and credit balance — legal basis: performance of a contract.

Processing payments for credit packs and the Naiara Plus subscription, and managing the subscription (renewals, cancellation and monthly credits) — legal basis: performance of a contract.

Handling support requests and quality complaints about results — legal basis: performance of a contract and legitimate interest.

Preventing fraudulent or abusive use of the Service — legal basis: legitimate interest.

Compiling anonymous operational statistics for the converter and PDF tools, to maintain and improve them — legal basis: legitimate interest.

Remembering your preferences (language, appearance) and, if you accept analytics cookies, understanding aggregate use of the Site — legal basis: consent, see the Cookie Policy.

Showing Google AdSense ads on the website's converter and PDF tool pages to people who are not Naiara Plus subscribers — legal basis: in the EEA, UK and Switzerland, the consent collected by Google's privacy message; elsewhere, our legitimate interest in funding the free tools or whichever basis local law requires.

Sending you marketing emails about our own services, similar to the ones you signed up for (offers, promos and news from Naiara) — legal basis: legitimate interest, under the ePrivacy "soft opt-in" (art. 13.2 of Directive 2002/58/EC, art. 21.2 LSSI in Spain), which allows these messages to people who are already users of the service. We tell you about it on the signup form itself, and you can object right then or at any time afterwards, free of charge and in one click, via the unsubscribe link in every email or from your account settings. If you turn this option on yourself in your settings, the legal basis becomes your consent, which you can withdraw the same ways. We never use your email for third-party advertising.

Measuring and improving the Site with our own statistics — legal basis: legitimate interest for aggregate figures with no identifier; your consent for following your path across visits (naiara_vid cookie).

Protecting accounts against unauthorised access by logging sign-ins, failed attempts, sign-ups and password changes, with the IP, approximate location and browser — legal basis: legitimate interest (security).

OpenAI: processes the photos you upload to generate the requested restoration, enhancement or colorisation result and, if you are a Naiara Plus subscriber and ask for it, the document's text (or the selected text) to generate the summary, translation or suggestion from the PDF editor's text assistant. Your photos and texts are used only to produce your result: OpenAI does not use data received through its API to train its models, and neither do we. OpenAI is based in the United States; the transfer relies on the safeguards OpenAI provides for international transfers (standard contractual clauses or an equivalent mechanism recognised under the GDPR).

Stripe: processes payments for credit packs and the Naiara Plus subscription (including when you pay with Apple Pay or Google Pay), including the charge for each renewal, and provides the customer portal from which you can manage or cancel your subscription. Stripe acts as an independent controller for payment data under its own privacy policy.

Google: if you sign in with your Google account, Google LLC processes the data needed for authentication.

Printify: when you order a physical print, we send Printify (and the print provider that makes your order) the photograph to be printed and the shipping details: first and last name, postal address, email and phone number if you provide one. Without this data the order cannot be produced or delivered.

Resend: sends account emails (verification, password recovery, order notices). It receives your email address and the message content.

DeepSeek: processes the chat product's messages to generate replies. DeepSeek is based in China, a country without a European Commission adequacy decision; the transfer relies on the contractual safeguards provided for in Article 46 GDPR.

Google Analytics (Google Ireland Limited): measures how the Site is used. Only activated if you accept the "Analytics" category in the cookie panel.

Meta (Meta Platforms Ireland Limited): the Meta pixel and Google Ads signals let us measure our advertising and show you relevant ads. Only activated if you accept the "Advertising" category. This does involve sharing browsing data for advertising purposes, which is why we ask for that permission separately.

Google AdSense (Google Ireland Limited): on the website, if you are not a Naiara Plus subscriber, it shows ads only on the converter and PDF tool pages. Google and other third-party vendors use cookies to serve ads based on your previous visits to this and other websites, and Google acts as an independent controller for ad personalisation. In the EEA, UK and Switzerland you decide through Google's privacy message; in US states with privacy laws you can opt out with the link in the footer. You can turn off personalised ads at adssettings.google.com and read how Google uses data at policies.google.com/technologies/partner-sites. The desktop app shows no ads, and Naiara Plus subscribers see no ads.

Microsoft: if you install the desktop app from the Microsoft Store, Microsoft processes download and installation data under its own privacy statement.

We do not sell your data for money. Beyond the above, we do not transfer your data to third parties for advertising, and we never share your photos or files with Meta or Google. Some US laws treat advertising cookies like those described here as a “sale” or “sharing”: see section 9.

You can withdraw analytics or advertising consent at any time from "Your Privacy Choices" in the footer.

Your account data is kept for as long as your account remains active. If you request deletion, we delete your account and associated data (including images in your history) within a reasonable period, unless we must retain certain information for a legal obligation (e.g. invoicing).

Photos you upload and the results generated are kept in your history for 30 days from their creation. After that period they are automatically and permanently deleted from our servers, both the original and the result, with no possibility of recovery. We remind you in your history and by email one week before, so you can download them or order prints. If you have ordered a print, the file needed to produce it is kept until the order is completed. Expiry notices are service communications, not marketing, and are sent to every account.

Files you send to the converter and PDF tools, from the website or the desktop app, are sent over HTTPS to Naiara's own servers only to carry out the requested job and are deleted from the server when each job finishes; you download the result. They are not used to train AI models. The anonymous operational statistics are kept with no files, file names, content or data that identifies you.

Browsing history in our own statistics is kept for 13 months. The access log (with IP addresses) is kept for 180 days and then deleted automatically.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by writing to [email protected] and properly identifying yourself.

You also have the right to withdraw your consent at any time (for example, for analytics or advertising cookies, via the "Your Privacy Choices" link in the footer), without affecting the lawfulness of processing carried out before withdrawal.

If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

We apply reasonable technical and organisational measures (encrypted passwords, secure HTTPS connections, access controls) to protect your data against unauthorised access, loss or alteration.

The Service is intended for people aged 18 or over. We do not knowingly request or collect data from anyone under that age.

This section applies to residents of US states with privacy laws, such as California (CCPA/CPRA), Colorado, Connecticut, Virginia, Utah and Texas, and supplements the rest of this policy. We extend these rights to all US residents, without requiring that the law applies to you.

What we collect and why: identifiers (name, email, IP address), commercial information (purchases and subscription), internet activity (use of the Site), approximate location, and the content you upload. It comes from you, your device and, if you sign in with Google, from Google. Purposes and retention periods are in sections 3 and 5. We do not use sensitive data to infer characteristics about you.

Sale and sharing: nobody pays us for your data as such, but Meta and Google advertising cookies may count as a “sale” or “sharing” for targeted advertising, and involve identifiers and internet activity. We do not knowingly sell or share data of anyone under 16; the Service is for people aged 18 or over.

Your rights: to know what data we hold and access it, get a copy, correct it, delete it, and opt out of its sale, its sharing and targeted advertising. We will not discriminate against you for exercising them.

How to opt out: use the “Your Privacy Choices” link in the footer. We also automatically honour your browser's Global Privacy Control signal, which we treat as an opt-out of advertising for that browser.

How to exercise your other rights: write to [email protected]. We will reply within 45 days, extendable where the law allows, and may ask for details to verify your identity. An authorised agent may act for you with proof of authorisation. If we decline your request, you can appeal by replying to that same email; if the appeal is denied, we will tell you how to complain to your state attorney general.

Naiara is offered worldwide from Spain. Your data is processed in the European Union and in the countries of the providers listed in section 4, with the safeguards described there.

Whatever your country and local law (for example the UK GDPR, the Swiss data protection act, Brazil's LGPD or Canada's PIPEDA), you can exercise the rights in section 6 by writing to [email protected] and complain to your country's data protection authority.

We may update this Privacy Policy to reflect legal changes or changes to the Service. The date of the last update appears at the top of this document.