Privacy Policy

Controller

The controller of personal data is AdScaled, the operator of AdScaled BG Remover. Send any privacy questions to contact@adscaled.media.

Files you process

Tools on the website process files entirely on your device – their content never reaches us. Files you send to the HTTP API are processed in memory only and discarded right after the result is sent; we do not store their content.

What data we process

• Account: e-mail address, password hash, language, plan and settings.
• Sign-in and security: signed-in devices (browser and system type, a hashed IP address, last activity), security events such as sign-ins or password and 2FA changes, the encrypted 2FA secret and hashed recovery codes.
• History of processed files: file name, tool, sizes and time – never the content. It is on by default for accounts; you can switch it off and clear it at any time. We keep at most the last 200 entries.
• API: names of your API keys with their hashes, permissions and restrictions; the number of operations and volume of data per month; credit balance and movements.
• Payments: Stripe customer and subscription identifiers, subscription status and invoices. Card details are processed only by Stripe.
• Referrals: your referral code, who invited you and the rewards credited.
• Communication: e-mails you exchange with us.

Without an account we keep no personal data in our application. Like any website, our hosting and network providers process your IP address and technical request data when delivering the pages.

Purposes and legal bases

• Providing the service and the account – performance of a contract (Art. 6(1)(b) GDPR).
• Security, abuse prevention and limits – legitimate interest (Art. 6(1)(f) GDPR).
• Accounting and taxes – legal obligation (Art. 6(1)(c) GDPR).
• Service e-mails (address verification, password reset, sign-in alerts, payments) – contract and legitimate interest. We do not send marketing without your consent.

How long we keep data

• Account data for as long as the account exists. After you delete the account we erase it, unless the law requires us to keep something.
• Sessions until you sign out or the session expires.
• Security events: the last 200 per account. Server security logs with IP addresses (for example failed sign-ins) only as long as needed to protect the service.
• History: until you clear it or delete the account, at most the last 200 entries.
• Accounting and tax documents for the period required by law.

Recipients and processors

• Railway – hosting of the application and database.
• Cloudflare – network, DNS and protection against attacks; requests to the site pass through it.
• Stripe – payments, subscriptions and invoices.
• E-mail service provider – delivery of service e-mails.
• Google Fonts – the Inter typeface is loaded from Google’s servers, so Google receives your IP address and browser details.

Some of these providers are based in the United States or may process data outside the EU. Such transfers are based on standard contractual clauses or a European Commission adequacy decision.

Cookies and browser storage

We set a single cookie – the session cookie, and only when you sign in. It is strictly necessary for your account, cannot be read by scripts and is removed when you sign out. In your browser’s local storage we keep your language preference and, if you arrive through an invitation link, the referral code for 30 days. We use no advertising or analytics cookies and do not track you across websites.

Your rights

• access to your data and a copy of it,
• correction of inaccurate data,
• erasure – you can delete your account yourself in its settings,
• restriction of and objection to processing,
• data portability,
• a complaint to the Czech Office for Personal Data Protection (www.uoou.cz) or to the supervisory authority of the EU country where you live.

Send requests to contact@adscaled.media. We reply within one month at the latest.

Security

The technical and organisational measures that protect your data are described on the Security and privacy page.

• Security and privacy

Changes to this policy

Registered users are informed of material changes to this policy by e-mail.