1. Introduction
Welcome to MatchUplift. We take the protection of your personal data very seriously. This Privacy Policy informs you about how we collect, process, and protect your data when you use our AI-powered photo optimization service.
Our service is designed with a "Privacy First" approach, ensuring that your identity and photos are handled with the highest level of security and discretion.
2. Data Controller
The responsible party for data processing on this website (the "Controller") is:
WiedemannAI
Baadfeld 65, 86753 Möttingen, Germany
Email: contact@matchuplift.com
3. Data Collection and Usage
We collect and process the following categories of data to provide our services:
- Account Information:Your email address is required for registration, sign-in (magic links), and service communication.
- Image Data:The photos you upload for AI optimization. These are processed solely for the purpose of providing the results you requested.
- Payment Data:Payment processing is handled securely by Stripe. We do NOT store your credit card details on our servers.
- Technical Data:IP address, browser type, and device information are collected for security and functional purposes.
4. AI Processing & Third-Party Processors
To provide our photo optimization service, we transmit data to our sub-processor OpenAI Ireland Ltd (and its US parent OpenAI, L.L.C.). This processing is necessary for the performance of our contract with you (Art. 6(1)(b) GDPR).
OpenAI API Data Handling:
- ✓No Model Training: We use the application API, which ensures your data is NOT used to train OpenAI's models.
- ✓Purpose Limitation: Image data is processed solely to generate the optimized versions you requested.
- ✓Zero Retention: Data sent to the API is retained by OpenAI for a maximum of 30 days for abuse monitoring purposes only, after which it is deleted.
- ✓International Transfers: Transfers to the US are protected under the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs).
5. Storage and Automatic Deletion
We maintain a strict data retention policy to protect your privacy:
Strict 30-Day Policy
To ensure maximum privacy, all uploaded source photos and generated result images are **automatically and permanently deleted** from our servers 30 days after they were uploaded or generated.
Our infrastructure is located within the European Union (Hetzner, Germany)to ensure high data protection standards in accordance with GDPR/DSGVO.
6. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- AccessRequest a copy of your stored data.
- RectificationCorrect any inaccurate information.
- ErasureRequest immediate deletion of your data.
- PortabilityReceive your data in a structured format.
To exercise these rights, please contact us at contact@matchuplift.com.
7. Cookies and Security
We use only technically necessary session tokens to manage your authentication. We do not use tracking or advertising cookies.
This site uses SSL/TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" in your browser's address bar.
