Privacy Policy | Oculyst

1. Introduction

Oculyst ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image analysis service. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, name, and password when you create an account
Payment Information: Billing details processed securely through Stripe (we do not store your full card details)
Images: Images you upload for analysis
Communications: Information you provide when contacting support

2.2 Information Collected Automatically

Usage Data: How you interact with our Service, including features used and analysis types performed
Device Information: Browser type, operating system, and device identifiers
Log Data: IP address, access times, and pages viewed
Cookies: Small files stored on your device to improve your experience

3. How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain our Service
To process your image analyses
To manage your account and subscriptions
To process payments and prevent fraud
To send you important updates, such as changes to our terms or policies
To respond to your inquiries and provide customer support
To improve and optimize our Service
To detect and prevent security threats
To comply with legal obligations

4. Image Processing and Storage

We take special care with the images you upload:

Processing: Images are processed client-side when possible and sent to AI services only for analysis
Storage: Uploaded images are not kept after analysis, except a small thumbnail saved with your analysis history when you are signed in (deleted when you delete that history item)
Auto-enhancement: Hard-to-see images and scanned pages may be automatically cleaned up (contrast, brightness, noise) before analysis; the original is kept alongside the cleaned version
Analysis Results: Analysis results may be stored in your account history for your convenience
Third-Party AI: Images are sent to Google Gemini for analysis, through the OpenRouter AI gateway, subject to OpenRouter's and Google's privacy policies
No Training: We do not use your images to train AI models
Deletion: You can delete your analysis history at any time

4.1 PDF Documents

Storage: PDFs you upload are stored privately in your account and are only accessible through short-lived links issued to you
Automatic deletion: The original PDF is deleted automatically 30 days after upload. The extracted text, images and attachments stay in your account until you delete the document
Processing: PDFs are processed by our document service (hosted on Modal). Pages with a readable text layer are read directly; scanned pages are sent to the AI provider described above for text recognition
Attachments: Files embedded in a PDF are stored as-is and are never opened or executed by us
Deletion: You can delete a document and all its results at any time from the Documents page

5. Data Sharing and Disclosure

We may share your information with:

Service Providers: Third parties who assist us in operating the Service (e.g., Stripe for payments, Supabase for authentication, AI providers for analysis)
Legal Requirements: When required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets
Protection: To protect the rights, property, or safety of Oculyst, our users, or others

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate security measures to protect your information:

Encryption of data in transit using HTTPS/TLS
Secure authentication through Supabase
Regular security assessments and updates
Limited access to personal data by authorized personnel only
Secure payment processing through PCI-compliant Stripe

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and associated data
Export: Request a copy of your data in a portable format
Opt-out: Unsubscribe from marketing communications at any time
Cookies: Manage cookie preferences through your browser settings

To exercise these rights, please contact us at the email address provided below.

8. Cookies and Tracking

We use cookies and similar technologies to:

Keep you signed in to your account
Remember your preferences (e.g., dark mode)
Understand how you use our Service
Improve the performance and functionality of our Service

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Service.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

11. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes described in this policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. UK/EU Residents (GDPR)

If you are a resident of the United Kingdom or European Union, you have additional rights under GDPR:

Right to be informed about how your data is used
Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Rights related to automated decision-making

You also have the right to lodge a complaint with your local data protection authority.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: boombasticzeez@outlook.com