Privacy

01Controller

Dinqr AB, organisation number 559461-8588, Örngatan 2, 311 68 Slöinge, Sweden (VAT SE559461858801) operates Anyratio and is the controller for personal data we collect to run your account, billing, security, and this website (https://anyratio.ai and app.anyratio.ai). Write to hello@anyratio.ai for access, deletion, or questions.

When you upload campaign photos that identify people (or other personal data you control for a client), you are the controller of that content and we are your processor. That processing is covered by the published data processing agreement, which applies to Solo, Studio, and Enterprise.

02What we collect

• Account: email, name, Google profile photo if you sign in with Google, password hashes via Firebase Auth (we never see a Google password).
• Billing: plan, trial status, invoices — processed by Stripe. We store Stripe customer and subscription ids, not full card numbers.
• Product: uploaded masters, generated images, job names, folders, team invites, usage counts, optional reports on an image.
• Sharing: if you turn on a view-only link for a generation, anyone holding that link can see those images without an account, until you switch sharing off. Share pages are marked noindex.
• Support and sales: whatever you send to hello@anyratio.ai or submit on a demo / waitlist form (work email, optional company, intent).
• Technical: IP and user agent on our hosts and CDNs (security, abuse, basic logs). Error reports may go to Sentry (text masked; media blocked).
• Marketing (only after you click Accept): Google Analytics and Ads cookies on this site and the app.

03Why we process it

Contract: account, generate sizes, bill credits, send transactional mail. Legal obligation: invoices and tax records. Legitimate interests: abuse prevention, security logs, product reliability — balanced against your rights. Consent: optional analytics and advertising cookies, and optional product mail if you leave that switch on in Account.

04Processors

We use other companies to operate Anyratio. They only get what they need:

• Google Cloud / Firebase (europe-west1) — authentication, Firestore, object storage, Cloud Run hosting.
• Third-party AI generation (Google Gemini API) — your photo is sent so the model can fill the new canvas. Provider safety systems may scan that request. Paid API content is not used to train their public models, per the provider’s current terms.
• Stripe — checkout, subscriptions, invoices, tax where configured. May process outside the EU under Stripe’s SCCs.
• Amazon SES (eu-central-1) — transactional email from our sending domain.
• Sentry (EU ingest) — application error reports. Session replay on errors only, with text masked and media blocked.
• Google Analytics 4 and Google Ads — only after you Accept cookies. We do not load those tags, and we do not send your email to Google, unless consent is granted.

Transfers outside the EU (Gemini inference, some Stripe/Google Auth, Sentry if needed) rely on the EU Commission’s standard contractual clauses or an adequacy decision. We do not sell your personal data. We do not use your masters to train public foundation models.

05Where it lives

Object storage for campaign files is configured in Google Cloud’s europe-west1 region. Transactional mail is sent from AWS SES in eu-central-1. The app runs on Cloud Run in europe-west1.

Generation runs on third-party AI infrastructure, which does not give us a guaranteed processing region — that inference may happen outside the EU. Stripe and Google Auth may also process some account data in other regions. So the honest description is that your files are stored in the EU, not that everything stays there.

06How long we keep it

Account and jobs stay while the account is open. Usage history is kept to meter the plan (current month plus the previous month for billing disputes). After you delete the account we remove jobs, masters, generated files, archived quality reports, and sales-lead rows we still hold for that email, and we cancel a subscription we bill for that user. Application logs rotate within 30 days. Stripe retains payment records as the law requires (typically several years). Support mail stays until we no longer need it for that thread.

07Your rights (GDPR)

If you are in the EEA/UK you can ask to access, correct, export, or delete personal data, object to some processing, and complain to a supervisory authority (in Sweden: IMY). Start with hello@anyratio.ai. You can also delete the account yourself in product settings — that is the fastest way to drop jobs and files.

Delete lives in the logged-in app: sign in, then Account. Billing owners with teammates must empty or transfer the team first.

The Service is not for children under 16. You must be 18 to open a paid plan.

08Cookies

Essential: rf_token (app session, httpOnly, 24 hours, refreshed while you stay signed in); anyratio-consent (your cookie choice, up to 13 months, Domain=.anyratio.ai); anyratio-market / locale in sessionStorage (no tracking).

Optional, only after Accept: Google Analytics 4 and Google Ads cookies set by googletagmanager.com (typically up to 13 months). We do not load those scripts, and we do not send conversion emails to Google, until you Accept. Essential only sends nothing to Google from our tags.

Change your mind any time: cookie settings on this site, or Account → Cookie settings in the app. Related: Terms · DPA · Svenska.

09Changes

We will date this page when it changes. Material changes get a note in the product or by email when we have an address.