Privacy Notice

Last updated: June 18, 2026

1. Controller

Vintify AI ("we", "us") is the data controller for personal data processed through What Enhancer ("the Service").

2. Personal data we collect

• Account data: email address, authentication credentials, user ID.
• Uploaded content: product photos you submit for enhancement.
• Usage data: number of enhancements per day, plan, feature usage, timestamps.
• Technical data: IP address, device and browser information, log data.
• Support data: messages you send us.
• Billing data: handled by our payments provider Paddle; we receive subscription status, plan, and customer reference only.

3. Purposes and legal bases

• Creating and operating your account, delivering the Service, applying plan limits — performance of a contract.
• Processing AI image enhancements — performance of a contract.
• Security, fraud prevention, abuse mitigation, enforcing our Terms — legitimate interests.
• Improving the Service and aggregate analytics — legitimate interests.
• Customer support — performance of a contract and legitimate interests.
• Legal compliance, including tax and accounting records — legal obligation.

4. How we share data

We share personal data with:

• Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, invoicing and fraud prevention.
• Cloud and infrastructure providers that host the Service, including database, storage and AI model providers acting as our subprocessors.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. Retention

We keep account and usage data for as long as your account is active. Uploaded photos are processed to deliver enhancements and are not stored long-term. Billing-related records are retained as long as required by applicable tax and accounting laws. When data is no longer needed it is deleted or anonymised.

6. International transfers

Our providers may process personal data outside your country, including in the EEA, UK and US. Where required we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Your rights

Subject to applicable law you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, to withdraw consent, and to lodge a complaint with your local supervisory authority. To exercise these rights, contact Vintify AI through the support channel.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls and least-privilege server access. No system is perfectly secure.

9. Cookies

We use only cookies and similar technologies strictly necessary to operate the Service (e.g. authentication sessions). We do not use third-party advertising cookies.

10. Children

The Service is not directed to children under 16. Do not use it if you are under that age.

11. Changes

We may update this notice. We will post the updated version with a new "Last updated" date.

12. Contact

For privacy questions, contact Vintify AI through the support channel listed in the Service.