Privacy Policy

Version 1.0 · Last updated: October 09, 2026

1. Data Controller

The data controller for the Service is:

  • Company name: objectremover (operated by the objectremover team)
  • Registered address: Singapore
  • Privacy contact email: support@objectremover.tech
  • Data Protection Officer: Not applicable (small-scale, non-sensitive data processing)

2. Information We Collect

2.1 Information you provide directly:

  • Account information: email address and password (stored hashed — we never store passwords in plain text)
  • Uploaded images: the photos and edit masks you submit for object removal. These are processed solely to perform your edit and are automatically deleted after processing (typically within 24 hours)
  • Payment information: transaction amount and payment status. We do not store complete card numbers — card data is handled by our payment processor (see Section 5)
  • Communications: emails, support tickets, and feedback you send us

2.2 Information collected automatically:

  • Device and network: IP address, device type, operating system, browser type, timezone
  • Usage data: pages visited, features used, operation logs, session duration
  • Log data: request timestamps, error logs, performance metrics, credit consumption for quota management

3. How We Use Your Information

PurposeLegal basis
Provide and maintain the Service (image processing, credit management)Contract performance
Billing and payment processingContract performance
Customer supportContract performance / legitimate interests
Service notifications (billing, security, policy updates)Legitimate interests
Content moderation, security, and fraud preventionLegitimate interests
Product optimization and analyticsLegitimate interests
Legal complianceLegal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot be linked back to an individual. We do not send marketing emails; if we ever do, they will require your prior consent and include an unsubscribe link.

4. Cookies and Tracking Technologies

TypePurposeCan be disabled
Strictly necessaryLogin sessions, core functionalityNo
AnalyticsAnonymous usage statistics, product improvementYes

Analytics tools used: Google Analytics and Microsoft Clarity. These tools load only when enabled by the site operator and can be blocked via your browser settings or browser add-ons.

5. Sharing and Disclosure

We do not sell your personal information, including as "sale" is defined under applicable laws such as the CCPA. We share your information only in the following circumstances:

  • Payment processor: Waffo Pancake — our PCI-DSS-compliant payment processor and Merchant of Record (transaction data). Card data never touches our servers
  • Service providers: cloud hosting, email delivery, and analytics vendors, bound by confidentiality obligations
  • Legal and regulatory requirements: when required by law, court order, or lawful requests from competent authorities
  • Business transfers: in a merger or acquisition, with prior notice and continuity of protection obligations
  • Law enforcement reporting: suspected illegal content (e.g., child exploitation material) may be reported to the appropriate authorities as required by law

6. Data Security

  • Encryption in transit: TLS / HTTPS
  • Storage security: passwords hashed; sensitive data encrypted at rest where applicable
  • Access control: least-privilege principles; personnel bound by confidentiality obligations
  • Automatic cleanup: uploaded images and processing artifacts are deleted after processing (typically within 24 hours)
  • Regular security reviews of the codebase and infrastructure

In the event of a security incident affecting your rights, we will notify you and the relevant supervisory authorities within 72 hours of becoming aware of it, as required by applicable law. Please keep your account credentials confidential and do not share them.

7. Data Retention

Data typeRetention periodAfter expiry
Uploaded images and edit resultsDeleted automatically after processing (typically within 24 hours)Secure deletion
Account informationWhile the account is active; 90 days after deletionDeleted or anonymized
Transaction recordsAs required by tax and accounting laws (typically up to 7 years)Deleted or archived
Support communications2 yearsSecure deletion
Moderation and security logs12 monthsSecure deletion

8. Your Data Rights

To exercise any of the following rights, contact us at support@objectremover.tech. We will respond within 30 calendar days.

RightDescription
Right to be informedKnow what data we collect and how we use it
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion of your data under certain conditions
Right to restrict processingPause processing of your data in certain situations
Right to data portabilityReceive your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent-based processing authorizations

If you believe we have not handled your request properly, you have the right to lodge a complaint with your local data protection authority.

9. Cross-Border Data Transfers

Our servers and service providers may be located in countries other than your own. Where personal data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses (SCCs) or equivalent protection levels required by applicable law.

10. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us immediately and we will delete it promptly.

11. Third-Party Links and Services

The Service may contain links to third-party websites or integrate third-party services. This policy applies only to information we collect directly. We are not responsible for the data practices of third parties; please review their policies before use.

12. Changes to This Policy

For material changes, we will notify you at least 15 days in advance via a platform announcement or your registered email, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated policy.

13. Contact Us

Version 1.0 · OpenSaaS

objectremover is committed to protecting your privacy. We process images securely and delete uploaded data after processing.