Privacy Policy

1. Information We Collect

ResizeX AI is designed to collect as little data as possible. Here is what we do and do not collect:

• Files you upload: Processed in-memory on our server during your request. Files are never written to disk or stored in any database. Memory is cleared immediately after your download completes.
• Theme preference: Stored in your browser's localStorage as app-theme. This is a local-only setting and is never transmitted to our servers.
• Server logs: Standard HTTP server logs may record your IP address, browser type, and request timestamp. These are retained for a maximum of 30 days for security and abuse prevention.
• No cookies: We do not use tracking or advertising cookies.
• No account data: We do not require registration and do not collect names, email addresses, or payment information.

2. How Your Files Are Processed

When you upload a file and submit a processing request:

• Your file is transmitted over an encrypted HTTPS connection to our server.
• The server reads the file into memory, validates the file type using magic-byte inspection, and executes the requested processing operation.
• The processed result is returned to your browser as a Base64-encoded payload.
• The server memory holding your file is released immediately. No copy is retained.

3. Third-Party Services

ResizeX AI may use the following third-party services:

• Google Fonts (Next.js self-hosted):Typography fonts are downloaded and self-hosted by our server at build time. Your browser does not make requests to Google's font CDN.
• Google Analytics (optional): If enabled, we use Google Analytics 4 to collect anonymised page-view statistics. No file content is ever shared with Google. This is loaded only when configured by the site operator.
• Microsoft Clarity (optional): Session analytics for UX improvement. No file data is transmitted. Loaded only when configured.

4. Data Security

We implement multiple security measures to protect your data:

• All connections use HTTPS with HSTS (HTTP Strict Transport Security).
• Uploaded files are validated using magic-byte inspection to prevent malicious file injection.
• File size is capped at 25 MB per request.
• API routes use appropriate security headers (X-Frame-Options, X-Content-Type-Options, etc.).
• Debug and test API endpoints are disabled in production.

5. Your Rights

Because we do not retain personal data, there is generally nothing to request deletion of. If you have concerns about server logs or believe your data may have been retained incorrectly, please contact us at support@resizexai.com and we will respond within 48 hours.

6. Children's Privacy

ResizeX AI is not directed at children under 13. We do not knowingly collect any personal information from children. If you believe a child has provided personal information to us, please contact us immediately.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the platform after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related questions or concerns, contact us at: support@resizexai.com