Privacy Policy

ecomresize is operated by Astur Pty Ltd (ABN 76 682 137 131) ("we", "us"), an Australian proprietary limited company based in Victoria, Australia. We provide a browser-based batch image resizing service for ecommerce sellers, available at ecomresize.com. Astur Pty Ltd (ABN 76 682 137 131) is the data controller for personal data processed through the Service. Questions about this policy: privacy@ecomresize.com.

Your images: none. All resizing happens in your browser using OffscreenCanvas. Your originals never reach our servers.

We do collect the following to run the service:

• Account data - email address and authentication credentials when you sign up. If you use Google or Apple sign-in, we receive your email and a stable user identifier from the provider.
• Usage counters - the number of images you process per day, used solely to enforce the free-tier limit.
• Saved presets - the names and dimensions of any custom presets you create while signed in.
• Contact submissions - if you fill in the contact-sales form, we store the name, work email, company, team size, image volume, and message you provide.
• Support tickets - anything you submit via the in-app support form.
• Billing data - if you subscribe to Pro, our payment processor (Paddle) collects payment details directly. We receive only your subscription status, plan, and renewal date - never your full card number.
• Error reports - when the app crashes, we log technical details (browser, route, error message) to help us fix bugs. These reports do not include your images.
• Server logs - standard request metadata (IP address, user agent, timestamp) is kept transiently for abuse prevention and is not joined to your account.

• We don't use third-party analytics or tracking pixels.
• We don't sell, rent, or share your data with advertisers.
• We don't set marketing cookies. The only cookies we use are essential for keeping you signed in.
• We don't read, scan, or process the contents of your images on our servers - because we never see them.

We use a small number of essential cookies to keep you signed in and protect against abuse. These are always on and cannot be disabled, as the service will not function without them.

Any analytics or marketing cookies are off by default and only set after you give explicit consent via our cookie banner. You can change or withdraw your consent at any time by clicking "Cookie preferences" in the footer. Withdrawing consent is as easy as giving it.

If you subscribe to the EcomResize newsletter, we store your email address, the timestamp of your opt-in, and where you signed up (proof of consent under GDPR Art. 7). Every newsletter email contains a one-click unsubscribe link.

We rely on a small number of vendors to operate the service:

• Lovable Cloud - hosting, authentication, and database (built on Supabase, Cloudflare).
• Paddle - payment processing and billing for Pro subscriptions. Paddle acts as the merchant of record.

Each subprocessor is contractually required to protect your data and may only use it to deliver the service to us.

We process account and usage data to perform our contract with you. We process contact-form and support data based on our legitimate interest in responding to your requests. We process billing data to comply with tax and accounting obligations.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these, email privacy@ecomresize.com from the address on your account. We respond within 30 days.

We keep your account data for as long as your account is active. When you delete your account, we erase your profile, saved presets, and usage history within 30 days. Billing records may be retained longer where required by tax law (typically 7 years). Anonymous server logs are rotated within 90 days.

Our infrastructure is hosted in Cloudflare data centers worldwide and Supabase regions in the EU and US. Where personal data is transferred outside your region, we rely on standard contractual clauses and the vendors' own data-protection frameworks.

ecomresize is not intended for users under 16. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

We protect personal data with appropriate technical and organisational measures, including TLS encryption in transit, encryption at rest for our managed database, role-based access controls, row-level security on user data, least-privilege access for staff, and regular review of our subprocessors. Because image processing happens entirely in your browser, your photos themselves are never transmitted to or stored on our servers.

We may update this policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

Privacy questions, data requests, or complaints: privacy@ecomresize.com. Postal mail can be addressed to Astur Pty Ltd, VIC 3037, Australia.