This policy explains what we collect when you use searchly.app, why we collect it, and what control you have over it. We wrote it to be read, not skimmed past.
1. Who we are
Searchly.app is a reverse image search service ("we", "us"). We are the controller of the personal data described here.
We delete the photo you upload as soon as your search finishes.
We don't keep a history of what you searched for.
We don't sell your data, and we don't use it for advertising.
We never see or store your card details. Stripe handles payments.
Analytics cookies only load if you say yes.
You can delete your account yourself, at any time.
3. What we collect
Photos and image links you search
You give us a photo or an image link so we can run your search. Section 4 explains exactly what happens to it.
Search results
Each search returns links and thumbnails from public web pages. We keep these for 30 minutes so your results page loads, then delete them.
Search counts
Each plan has a search limit. To apply it, we record the time of each search. If you're signed in, we link that time to your account. If you're not, we link it to a one-way coded version of your network address. We can't turn that code back into your address. We never record what you searched for.
Account details
If you create an account, we store your email address, your name if you give one, and your plan. We store your password only as a secure hash, so we never know what it is.
Payment and subscription details
When you buy a plan, you pay through Stripe. Your card number goes straight to Stripe and never touches our servers. Stripe tells us your plan, its status, your renewal date and a customer reference.
Messages you send us
If you use our contact form or email us, we keep your name, email address and message so we can reply.
Technical data
Like almost every website, our server logs each request: your IP address, browser type, the page you asked for and the time. We use these logs to keep the site secure and working.
Usage analytics (only with your consent)
If you accept analytics cookies, Google Analytics tells us how people use the site in aggregate, such as which pages are popular. If you decline, it never loads.
4. Your photos
Photos deserve extra care, especially photos of people. Here's the full journey of an image you upload.
Before upload
Your browser shrinks large photos before sending them. This makes uploads faster and means we receive less data.
During the search
We save the photo on our server under a random name. Our own search service fetches it through a temporary, unlisted link and looks for visually similar images on the public web. A search usually takes a few seconds.
After the search
We delete the photo the moment the search finishes, whether it worked or not. The temporary link stops working at the same time. If a search is ever interrupted, an automatic cleanup removes any leftover upload within 15 minutes.
On your device
Your browser keeps a small preview so the results page can show "Your Image". It stays in that browser tab and disappears when you close it.
What we never do
We don't keep copies. We don't build a database of uploaded photos. We don't use your photos to train AI models. We don't share them with third parties.
5. Why we use your data
We only use data for the reasons below. If you're in the EU or UK, we've listed the legal basis for each.
To run your searches and your account
This is the service you asked for. Legal basis: performance of our contract with you.
To take payments and manage subscriptions
Legal basis: performance of our contract with you, and our legal duty to keep financial records.
To apply plan limits, prevent abuse and keep the site secure
Legal basis: our legitimate interest in running a fair, safe service.
To answer your messages and send emails you ask for
For example, password reset links. Legal basis: performance of our contract, or your request.
To understand how the site is used
Legal basis: your consent. You can withdraw it at any time through Cookie settings in the footer.
We don't send marketing emails. We don't sell or rent personal data, and we don't "share" it for cross-context advertising as defined under California law.
6. Who we share data with
We use a few trusted companies to run the service. Each one only gets what it needs for its job.
Amazon Web Services (hosting)
Our servers run on AWS in Stockholm, Sweden, inside the European Union.
Stripe (payments)
Stripe processes subscription payments and helps prevent fraud. Stripe handles your payment details under its own privacy policy.
Our email provider
It delivers emails you ask for, such as password resets and our replies to you.
Google Analytics (only with consent)
Google receives usage data from your browser if you accept analytics cookies. See Google's privacy policy.
When the law requires it
We may disclose data to comply with a valid legal request, or to protect people from harm. If a company buys our business, your data would move under this same policy, and we'd tell you first.
Your uploaded photos are not shared with any of these companies, except that AWS stores them on our behalf for the few seconds a search takes.
7. International transfers
Our servers are in the EU. Stripe and Google may process data in the United States and other countries. When data leaves the EU or UK, these providers protect it with the European Commission's Standard Contractual Clauses or an equivalent safeguard.
8. How long we keep data
Uploaded photos
Deleted when the search finishes. Never more than 15 minutes, even if something goes wrong.
Search results
30 minutes.
Search counts
About two months, then deleted automatically.
Server logs
14 days.
Account details
Until you delete your account.
Messages to support
As long as we need them to help you and keep a record of the conversation. Ask us and we'll delete them sooner.
Payment records
As long as tax and accounting laws require, usually several years. Stripe keeps its own records under its policy.
9. Cookies
We use a few essential cookies to keep you signed in and to protect forms. Analytics cookies are optional and off until you accept them. Our Cookie Policy lists every cookie we use.
10. Your rights
Wherever you live, you can ask us to:
Tell you what personal data we hold about you, and give you a copy
Correct data that is wrong
Delete your data
Send your data to you in a portable format
Stop or limit how we use your data, or object to it
Withdraw your consent to analytics at any time
You can delete your account yourself from My Account. For anything else, email support@searchly.app from the address on your account. We reply within 30 days, and usually much sooner. We won't treat you differently for using your rights.
If you're in the EU or UK and you're unhappy with our answer, you can complain to your local data protection authority.
11. Security
Every connection to searchly.app is encrypted with TLS. Passwords are hashed. Forms are protected against cross-site attacks. Only the people who run the service can access our servers. No system is perfectly secure, but we work hard to keep your data safe. If a breach ever affects you, we'll tell you promptly.
12. Children
Searchly.app is for adults. You must be 18 or older to use it. We don't knowingly collect data from children. If you think a child has given us personal data, contact us and we'll delete it.
13. Changes to this policy
When we change this policy, we'll update the date at the top. If a change matters, we'll also email account holders before it takes effect.