Privacy Policy
Last updated: April 7, 2026
This Privacy Policy describes how Aurelia Premium, a subsidiary of Mantra Services ("we", "us"), handles your information when you use our image-editing tools and website.
1. Image Processing Privacy
When you use the Image Cleaner or Brush Tool, your uploaded image is transmitted over HTTPS to our processing backend, where a machine-learning model performs the edit and returns a modified image to you. Your image is held in memory on the backend only for the duration of that single job and is discarded as soon as the response is delivered. We do not:
- Write image contents to persistent disk storage
- Retain images after the job completes
- Use your images to train, fine-tune, or evaluate our models
- Share image contents with any third party beyond the cloud infrastructure directly serving the request
We do not currently expose a job-history feature. If we ever add one, it will be opt-in, clearly labelled, and this Privacy Policy will be updated before it is enabled.
We log minimal job metadata (timestamp, image dimensions, user or IP, credits charged, success/failure) in our usage database so we can enforce rate limits, bill correctly, and debug production issues. This metadata does not include the image itself or any visual content derived from it.
2. Information We Collect
2.1 Website Usage
When you visit our website, standard web server logs may record:
- IP address (retained for rate limiting and abuse prevention)
- Pages visited
- Browser type and operating system
- Referral source
2.2 Account Information
If you create a free account or paid subscription via Google sign-in, we store:
- Your Google-provided email address and stable Google user ID
- Credit balance and transaction history (grants, charges, refunds)
- Subscription tier and billing status (but not your full card number — payment details are held by our merchant of record)
- Auth events (sign-in, sign-out, token refresh) for security monitoring
2.3 Usage Metadata (image jobs)
Each image-editing job writes a row to our usage log containing only: timestamp, endpoint, image dimensions, credits charged, and success/failure. This row never contains the image itself or any visual data derived from it.
2.4 Contact Form
If you use our contact form, we collect:
- Name and email address (as provided by you)
- Subject and message content
- IP address (for rate limiting)
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Respond to support requests | Legitimate interest |
| Prevent abuse (rate limiting) | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. Information Sharing
We share your information only with:
- Mantra Services: Our parent company, which provides technical infrastructure
- Cloud infrastructure: Hosting providers (Cloudflare, HuggingFace) for service delivery
- Law enforcement: When required by law or valid legal process
We do not sell your personal information to third parties.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Uploaded image contents | Held in memory for the duration of the job only; never written to disk |
| Usage metadata (timestamp, dimensions, credits) | Retained for the life of the account; required for billing and abuse prevention |
| Account records (email, balance, subscription) | Retained while the account is active; deleted on request or 12 months after account closure |
| Auth events (sign-in log) | 180 days |
| Server access logs | 30 days |
| Contact form submissions | 2 years |
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Object: Object to certain processing activities
To exercise these rights, contact us at [email protected]. We respond within 30 days.
7. Cookies
We use only essential cookies for:
- Session management: Basic site functionality
We do not use advertising cookies or third-party tracking pixels.
8. Security
We implement industry-standard security measures including HTTPS encryption on all pages and security headers.
9. Children's Privacy
Our Service is not directed at individuals under 13 years of age. We do not knowingly collect personal information from children.
10. Compliance
This policy is designed to comply with:
- Indonesia Personal Data Protection Law (PDP) — UU No. 27 Tahun 2022
- EU General Data Protection Regulation (GDPR) — for visitors in the European Economic Area
11. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date reflects the most recent revision.
12. Contact
For privacy-related inquiries:
- Email: [email protected]
- Company: Aurelia Premium (subsidiary of Mantra Services)
- Address: Pontianak, Kalimantan Barat, Indonesia