Privacy policy

Controller

Sergei Starysh, Marktplatz 21 top 2, 6800 Feldkirch, Österreich, service@werbetrends.at

Uploaded images and results

We process the images you upload only to create the vector conversion and the preview. Files are stored in a private storage area and are not shared with third parties.

Guest uploads and results are deleted automatically after 24 hours. Images in an account that were not purchased are deleted after 30 days. Purchased images in an account are kept until you delete them in your account or ask us to delete your account. Images purchased without an account are deleted 30 days after the purchase. In addition, we keep a copy of the original for training purposes (see the next section).

Copies of uploaded images for training the converter

We keep a copy of every uploaded original beyond the periods above and use it exclusively to analyse and train our own conversion technology (for example as training and test material). Before each upload you accept this in the upload area together with our terms. Legal basis: our legitimate interest in improving the quality of our service (Art. 6(1)(f) GDPR) and the terms you accepted.

We only store the original image, its file name, the time of your acceptance and, if applicable, the link to your account. The images are kept in private storage at Cloudflare R2 with storage location in the EU and are neither shared with third parties nor published. They are deleted automatically after three years at the latest. Deleting the image in your account does not delete this copy.

You can object to this use at any time: write to service@werbetrends.at stating the file name and the approximate date of the upload, and we will delete the copy.

Account

If you create an account, we store your email address and, if you sign in with Google, the basic profile data provided by Google. Legal basis: performance of a contract.

Payments

Payments are processed by Stripe Payments Europe Ltd. We receive the payment status, the amount, your email address, the billing name and address, the country of the card and, if you enter one, your company name and VAT ID, but no card details. We use this data to issue the invoice (Art. 6(1)(c) GDPR) and keep invoices for seven years as required by Austrian tax law (§ 132 BAO). VAT IDs of EU businesses are checked in the European Commission's VIES system.

Cookies

Technically necessary cookies and browser storage (§ 165(3) Austrian TKG 2021, Art. 6(1)(b) and (f) GDPR): a session cookie to assign your conversions to you (vw_sid, 30 days), the login cookie of your account (sb-…, until you sign out), the language setting (NEXT_LOCALE, until you close the browser) and, in browser storage, your choice of light or dark mode and your privacy choice (vp-theme, vp-consent). On the checkout page, Stripe sets cookies for fraud prevention (__stripe_mid, 1 year; __stripe_sid, 30 minutes).

We use statistics services only with your consent (§ 165(3) Austrian TKG 2021, Art. 6(1)(a) GDPR). Before that, no such script is loaded and no cookie is set. Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) measures page views, referrers and device types; IP addresses are truncated, Google signals and advertising features are disabled (cookies _ga and _ga_<ID>, 2 years). Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, Leopardstown, Dublin 18, Ireland) creates heatmaps and anonymised session recordings of clicks, scrolling and mouse movement, without input in form fields (cookies _clck, 1 year; _clsk, 1 day; CLID/MUID, 1 year). Both providers may transfer data to the USA on the basis of the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023).

You can withdraw or change your consent at any time with effect for the future under "Cookie settings" at the bottom of every page, where all services are listed with provider, purpose, stored cookies and retention. When you withdraw, we delete the cookies of the statistics services in your browser.

Processors

Hosting: Vercel Inc. Database, login and file storage: Supabase Inc. (EU region). Image processing: Hetzner Online GmbH (Germany). Email delivery: Resend. Payments: Stripe. VAT ID check: European Commission (VIES). With your consent: Google (Google Analytics), Microsoft (Clarity). Copies for training the converter: Cloudflare, Inc. (R2, storage location EU).

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.