Privacy

01Controller

Dinqr AB (Sweden) operates Anyratio and is the controller for personal data we collect when you use https://dev.anyratio.ai and the product at app.anyratio.ai. Write to hello@anyratio.ai for access, deletion, or a DPA discussion (Enterprise).

02What we collect

• Account: email, name, Google profile photo if you sign in with Google, password hashes via Firebase Auth (we never see a Google password).
• Billing: plan, trial status, invoices — processed by Stripe. We store Stripe customer and subscription ids, not full card numbers.
• Product: uploaded masters, generated images, job names, folders, team invites, usage counts, optional reports on an image.
• Sharing: if you turn on a view-only link for a generation, anyone holding that link can see those images without an account, until you switch sharing off.
• Support: whatever you send to hello@anyratio.ai.
• Technical: IP and user agent on our hosts and CDNs (security, abuse, basic logs).
• Marketing (with consent): Google Analytics and Ads tags may set cookies after you accept the cookie banner on https://dev.anyratio.ai.

03Why we process it

We process data to run the contract (account, generate sizes, bill credits), to keep the Service secure, and — where required — with consent (optional mail, Google Ads cookies on the marketing site). Legitimate interests cover abuse prevention and product logs, balanced against your rights.

04Processors

We use other companies to operate Anyratio. They only get what they need:

• Google Firebase — authentication, database, file storage.
• Third-party AI generation (Google) — image generation. Your photo is sent so the model can fill the new canvas. Provider safety systems may also scan that request. Paid API content is not used to train their public models, per the provider’s terms.
• Stripe — checkout, subscriptions, invoices, tax where configured.
• Amazon SES — transactional email (reset password, invites, receipts) from our sending domain.
• Google Analytics 4 — site and app usage, only after cookie consent on the marketing site (Consent Mode).
• Google Ads — conversion and campaign measurement on the marketing site, only after cookie consent.

We do not sell your personal data. We do not use your masters to train public foundation models.

05Where it lives

Object storage for campaign files is configured in Google Cloud’s europe-west1 region. Transactional mail is sent from AWS SES in eu-central-1.

Generation runs on third-party AI infrastructure, which does not give us a guaranteed processing region — that inference may happen outside the EU. Stripe and Google Auth may also process some account data in other regions. So the honest description is that your files are stored in the EU, not that everything stays there. We do not claim “nothing leaves the EU”, because with these processors in the path it would not be true.

Enterprise can negotiate region and a GDPR DPA separately.

06How long we keep it

Account and jobs stay while the account is open. Usage history is kept to meter the plan. After you delete the account we remove jobs, masters, and generated files we still hold, and cancel a subscription we bill for that user. Backups and logs fade on a short rotation. Stripe retains payment records as the law requires. Emails you sent us stay in the inbox until we no longer need them for support.

07Your rights (GDPR)

If you are in the EEA/UK you can ask to access, correct, export, or delete personal data, object to some processing, and complain to a supervisory authority (in Sweden: IMY). Start with hello@anyratio.ai. You can also delete the account yourself in product settings — that is the fastest way to drop jobs and files.

Delete lives in the logged-in app: sign in, then Account. Billing owners with teammates must empty or transfer the team first.

08Cookies

The app needs a session to stay signed in. That is essential. On the marketing site, a cookie banner appears on first visit. Google Analytics and Ads tags load with consent denied by default. Optional analytics and ad cookies are set only if you click Accept when those tags are enabled. Reject keeps measurement cookies off; Google may still receive cookieless pings (IP, user agent) under Consent Mode when a tag is configured.

You can change your mind by clearing site data for https://dev.anyratio.ai — the banner will appear again.

09Children

The Service is for professional use, not for children under 16. Do not create an account for them.

10Changes

We will date this page when it changes. Material changes get a note in the product or by email when we have an address. Related: Terms of use.