Privacy policy
This policy explains what personal data Nítida processes, for what purpose, for how long and what rights you have over it.
Last updated: October 4, 2026
1. Data controller
QuietStack LLC, a limited liability company formed in Wyoming (USA) on August 19, 2026, filing number 2026-002060291 with the Wyoming Secretary of State, with its registered address at 30 N Gould St, Ste R, Sheridan, WY 82801, United States. For any privacy question: support@nitidaphoto.com.
2. What data we process
Images and instructions: the image you upload, the area you mark and, if you type one, the description of what you want to remove. Session data: a random identifier stored in a technical cookie, together with your credit balance, the status of your access and technical data about each operation (tool used, date, duration and cost). Payment data: if you buy, Stripe collects your email address, name, country and card details; we receive and store your email address, the customer and subscription identifiers and the payment outcome, never the full card number. We use your email address to send you the welcome email and any sign-in links you request, and to help you; not for advertising. Technical data: your IP address and connection data. Communications: the content of the emails you send us.
3. Why we use it and on what legal basis
Providing the Service you request (processing the image, managing your access, your credits and your subscription), on the basis of performing the contract. Charging and meeting tax and accounting obligations, on the basis of performing the contract and our legal obligations. Protecting the Service against abuse, fraud and attacks, for example by limiting the number of requests per IP address, on the basis of our legitimate interest in keeping the service secure. Handling your questions, refunds and requests, on the basis of performing the contract or your request. We do not use your data to show you personalised ads (we only measure which ads work, if you accept), we do not sell it and we do not use your images to train artificial intelligence models. We do not make automated decisions that produce legal effects concerning you.
4. Your images
Images are sent to our processing provider to generate the result, which is returned to your browser. Our server does not keep a copy of your images or of the results once delivered. While you complete a payment, your browser may temporarily keep your image in its own session storage, on your device, so your work is not lost when you return from the payment page; it is deleted when you return and, in any case, when you close the tab or after one hour. More detail in the Image retention and processing notice.
5. Who we share it with
fal.ai (Features and Labels, Inc., USA), the artificial intelligence infrastructure that runs the image processing models, including models from BRIA and Google. Stripe (Stripe, Inc. and Stripe Payments Europe, Ltd.), payment processing; Stripe also processes certain data as an independent controller, under its own privacy policy. Profesional Hosting, hosting for the web server and email. We share with each provider only the data needed for its function, and we require them not to use it for their own purposes incompatible with the Service. We may also disclose data when required by law or by a competent authority.
6. International transfers
QuietStack LLC and some of its providers, such as fal.ai and Stripe, are located in the United States. When your data leaves the European Economic Area, it does so with the safeguards provided for in the General Data Protection Regulation: the EU-U.S. Data Privacy Framework where the recipient participates in it, or the standard contractual clauses approved by the European Commission.
7. How long we keep it
Images: not kept on our server once the result has been delivered. Session cookie: 30 days from your last visit. Session and operation data: while your access is active and afterwards for as long as needed to handle claims or issues. Payment and billing data: for the periods required by tax and accounting rules. IP address for abuse prevention: in memory only, for minutes; the server's technical logs are kept for a limited period according to the hosting provider's rotation. Emails: as long as needed to resolve your query and handle any claims.
8. Your rights
You can request access to your data, its correction or deletion, restriction of its processing and its portability, and object to processing based on legitimate interest, by writing to support@nitidaphoto.com. Because we do not use accounts, to locate your data we will ask for information that identifies your purchase, such as the email address used for payment. We will reply within one month. If you believe we have not handled your request properly, you can complain to the data protection authority of your country (for example, in the EU/EEA your national data protection authority, or in the UK the Information Commissioner's Office, ico.org.uk).
9. Security
We apply reasonable technical and organizational measures: an encrypted connection (HTTPS) across the whole site, cookies protected against being read by scripts and against being sent from other sites, abuse limits, provider keys kept only on the server and signature verification for payment notifications. No system is completely infallible; if we detect a breach affecting your data, we will act as required by law.
10. Minors
The Service is not intended for people under 18 and we do not knowingly process their data. If you believe a minor has given us data, write to us and we will delete it.
11. Changes to this policy
If the way we process data changes, we will update this policy and its date. If the change is material, we will make it clearly visible on the site.
12. Help chat
If you use the help chat, your messages and your account status (whether you’ve paid, credits and access dates, without your email) are sent to our AI provider, Anthropic (USA), only to generate the answer. We keep conversations for 30 days, without your email, to review and improve the answers, and then delete them. Legal basis: our legitimate interest in helping you and the performance of the contract.
13. Photos sent to our support team
If you send us a photo from the chat for us to work on, we keep the photo, your description and your email to do the work and send you the result. We delete them 30 days after delivery (or after receipt, if it is never delivered).
14. Cancellation records
When you cancel your subscription we record the date and time of the request, the email you signed up with, the sign-up date, the channel used, your IP address and browser. It proves when you cancelled and is a record that is never altered. We keep it for 6 years after cancellation to handle claims and meet legal obligations.
15. Charge and refund reviews
If you ask us from the chat to review a charge or a refund, we keep your email, the reason, the date and amount you give, your message and the status of the review. To resolve it, our administration team receives a summary together with the payment details held by Stripe (subscription status and recent charges, never your card number). The decision is always made by a person, not by an automated system. Legal basis: performance of the contract and our legal obligations. We keep this data while the review is open and then with our billing records, for 6 years at most.
16. Ad measurement (Google Ads)
If you accept Google Ads cookies, Google (Google Ireland Ltd. and Google LLC, USA) receives data about your visit to measure whether an ad led to a purchase: cookie identifiers, the page and, after a payment, a conversion ping with its value and payment ID, without your name or email. If you don’t accept, it only receives pings without cookies or identifiers. Legal basis: your consent, which you can withdraw on the cookie policy page. Transfers to the USA rely on the EU-US Data Privacy Framework.