Privacy Policy
Last Updated: October 2026 • Strict Zero Permanent Storage Commitment
Our Privacy Guarantee to You
At SanitizeAI, user privacy is our foundational core principle. Uploaded media and files are processed strictly for metadata cleaning and watermark purging, are never sold or shared, and are never permanently stored on our servers.
1 Ephemeral Media Processing & Zero Retention
When you upload an image, video file, or text block to SanitizeAI for processing:
- The media is received in volatile temporary server memory (RAM) or isolated ephemeral scratch directories.
- Our engine parses and destroys AI metadata (C2PA, Stable Diffusion EXIF, Midjourney chunks, SynthID lattices, or zero-width unicode).
- As soon as the sanitized output bytes are streamed back to your browser, the temporary file is immediately and permanently deleted.
- We retain zero archival copies, zero cached duplicates, and zero visual backups of your uploaded content.
2 No Data Selling & No AI Training
We operate a clean SaaS model funded strictly by software subscriptions. Under no circumstances do we:
- Sell, monetize, trade, or license your uploaded files or metadata to third-party data brokers or advertisers.
- Feed user content into generative AI training corpora, dataset aggregators, or public indexing spiders.
- Inject tracking beacons, surveillance cookies, or external analytics scripts into your processed files.
3 Account Information & Minimal Data Collection
We collect only the minimal data strictly necessary to operate your subscription:
- Authentication: Email address and profile name (if you register via Google OAuth or Email) to manage quotas and plan privileges.
- Billing: Subscription status and expiration dates. Payments are processed directly through PCI-DSS certified payment processors (Stripe); we never store your credit card numbers.
- Telemetry: High-level anonymous counter tallies (e.g. total cleans performed) used solely for server capacity load balancing.
4 Transport Security & Encryption
All communications between your device, our web interface, and the FastAPI sanitization engine are encrypted in transit using industry-standard TLS 1.3 / HTTPS. API requests authenticate via encrypted Bearer headers and unique API keys.
5 Your Rights & Contact
You have the right to request full deletion of your user account profile at any time. For privacy inquiries or data removal requests, contact our Data Privacy Officer at vibeautomationn@gmail.com.