1. Introduction

ADMAXIA LTD, operating img.photos ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our image hosting service and API (the "Service").

This Privacy Policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

Account information: email address, name (optional), password (hashed)
Image uploads: files you upload to our Service
API usage: API keys and usage statistics
Communication data: messages you send to us

2.2 Automatically Collected Information

IP address and location data
Browser type and version
Device information
Usage data: pages visited, time spent, features used
Cookies and similar tracking technologies (see Cookie Policy)

2.3 Third-Party Information

If you sign in using Google OAuth, we receive your Google account email and profile information as permitted by your Google account settings.

3. How We Use Your Information

We use the collected information for the following purposes:

To provide, maintain, and improve our Service
To process and store your image uploads
To authenticate your account and prevent unauthorized access
To send you service-related notifications (account updates, security alerts)
To respond to your inquiries and provide customer support
To monitor and analyze usage patterns and trends
To detect, prevent, and address technical issues and security threats
To comply with legal obligations and enforce our Terms of Service

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

Consent: For optional analytics and advertising cookies, when you allow them
Contractual necessity: To fulfill our obligations under the Terms of Service
Legitimate interests: To improve our Service, ensure security, and prevent fraud
Legal obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist in operating our Service (hosting, analytics, email services) under strict confidentiality agreements
Legal Requirements: When required by law, court order, or government regulation
Protection of Rights: To protect our rights, property, or safety, or that of our users
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
With Your Consent: When you explicitly authorize us to share your information

6. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption of data in transit (HTTPS/TLS)
Hashed and salted password storage (Argon2)
Secure API key storage
Regular security audits and updates
Access controls and authentication

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

Right to Access: Request a copy of your personal data we hold
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time
Right to Non-Discrimination (CCPA): Exercise your rights without discrimination

To exercise these rights, please contact us at the email address provided in Section 12. We will respond to your request within 30 days.

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws, including Standard Contractual Clauses where applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Company: ADMAXIA LTD
Email: [email protected]
Website: https://img.photos