Privacy Policy

Marc Granell Beltrán (trading as "Naiara AI"), Tax ID (NIF) 54030354M, address Calle Linares 21, 4º puerta 7, 46018 Valencia (Spain).

Contact email: [email protected]. Phone: +34 615 87 48 95.

Account data: name, email address and password (stored encrypted); if you sign up with Google, the name, email and profile photo provided by Google.

Service-usage data: the photos you upload, the images generated as a result, your restoration history, and the credit balance associated with your account.

Payment data: credit packs are paid for through Stripe, which processes your card details directly. We never store your full card number.

Technical data: IP address, preferred language, and cookies (see the Cookie Policy).

Support communications: the content of any messages you send us through the support ticket system or when reporting an issue with a result.

Providing the image-restoration service you request — legal basis: performance of a contract.

Managing your user account and credit balance — legal basis: performance of a contract.

Processing payments for credit packs — legal basis: performance of a contract.

Handling support requests and quality complaints about results — legal basis: performance of a contract and legitimate interest.

Preventing fraudulent or abusive use of the Service — legal basis: legitimate interest.

Remembering your preferences (language, appearance) and, if we activate analytics cookies in the future, understanding aggregate use of the Site — legal basis: consent, see the Cookie Policy.

Sending you marketing emails about our own services, similar to the ones you signed up for (offers, promos and news from Naiara) — legal basis: legitimate interest, under the ePrivacy "soft opt-in" (art. 13.2 of Directive 2002/58/EC, art. 21.2 LSSI in Spain), which allows these messages to people who are already users of the service. We tell you about it on the signup form itself, and you can object right then or at any time afterwards, free of charge and in one click, via the unsubscribe link in every email or from your account settings. If you turn this option on yourself in your settings, the legal basis becomes your consent, which you can withdraw the same ways. We never use your email for third-party advertising.

OpenAI: processes the photos you upload to generate the requested restoration, enhancement or colorisation result. OpenAI is based in the United States; the transfer relies on the safeguards OpenAI provides for international transfers (standard contractual clauses or an equivalent mechanism recognised under the GDPR).

Stripe: processes payments for credit packs. Stripe acts as an independent controller for payment data under its own privacy policy.

Google: if you sign in with your Google account, Google LLC processes the data needed for authentication.

Printify: when you order a physical print, we send Printify (and the print provider that makes your order) the photograph to be printed and the shipping details: first and last name, postal address, email and phone number if you provide one. Without this data the order cannot be produced or delivered.

Resend: sends account emails (verification, password recovery, order notices). It receives your email address and the message content.

DeepSeek: processes the chat product's messages to generate replies. DeepSeek is based in China, a country without a European Commission adequacy decision; the transfer relies on the contractual safeguards provided for in Article 46 GDPR.

Google Analytics (Google Ireland Limited): measures how the Site is used. Only activated if you accept the "Analytics" category in the cookie panel.

Meta (Meta Platforms Ireland Limited): the Meta pixel and Google Ads signals let us measure our advertising and show you relevant ads. Only activated if you accept the "Advertising" category. This does involve sharing browsing data for advertising purposes, which is why we ask for that permission separately.

We do not sell your data. Beyond the above, we do not transfer your data to third parties for advertising purposes, and we never share your photographs with Meta or Google.

You can withdraw analytics or advertising consent at any time from "Cookie preferences" in the footer.

Your account data is kept for as long as your account remains active. If you request deletion, we delete your account and associated data (including images in your history) within a reasonable period, unless we must retain certain information for a legal obligation (e.g. invoicing).

Photos you upload and the results generated are kept in your history until you delete them or close your account.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by writing to [email protected] and properly identifying yourself.

You also have the right to withdraw your consent at any time (for example, for analytics cookies, via the "Cookie preferences" link in the footer), without affecting the lawfulness of processing carried out before withdrawal.

If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

We apply reasonable technical and organisational measures (encrypted passwords, secure HTTPS connections, access controls) to protect your data against unauthorised access, loss or alteration.

The Service is intended for people aged 18 or over. We do not knowingly request or collect data from anyone under that age.

We may update this Privacy Policy to reflect legal changes or changes to the Service. The date of the last update appears at the top of this document.