Privacy Policy
Last updated: September 30, 2026
1. Data controller
Feyard (“we”, “us”) operates feyard.com. The data controller is:
- Operator: Weiqing Li, an individual operator in China
- Privacy contact: privacy@feyard.com
- Data Protection Officer: not applicable
2. The core principle: your files never leave your device
Our tools run locally in your browser using on-device inference technologies (such as WebGPU and WebCodecs). The images, videos, audio, PDFs, and other files you process are never uploaded to or stored on our servers. We cannot view, access, or recover them. Model files downloaded by a tool are open-source AI models used for local execution, not your personal data. The limited information we do collect is described below.
3. Information we collect
3.1 Information you provide
- Account information — when you register: your email address and display name. Passwords are handled by our authentication provider and stored only in salted, hashed form; we never see your password in plain text.
- Third-party sign-in — if you log in with Google or GitHub, we receive the basic profile information you authorize (typically name, email address, and avatar) from that provider.
- Billing information — when you subscribe or make a purchase: your plan, subscription status, order identifier, transaction amount and payment status. We do not receive or store card numbers; card data is handled exclusively by Waffo Pancake (see Section 6).
- Communications — emails you send to our support addresses and their contents.
3.2 Information collected automatically
- Technical and log data — IP address, device type, operating system, browser type, referring pages, request timestamps, and error/performance logs, collected by our hosting and CDN provider to operate and secure the site.
- Approximate region — country-level location may be inferred from IP address. We never collect precise geolocation and the site never requests the geolocation permission.
3.3 Information stored locally in your browser
- Preferences such as language, theme, and your cookie-consent decision, stored in local storage.
- Downloaded AI model files and offline tool data, cached in your browser’s IndexedDB so you do not re-download them.
Locally stored data never leaves your device and can be cleared at any time through your browser settings.
3.4 Information we do not collect
- The files you open or process in our tools.
- Credit card or other payment-card numbers.
- Precise location data.
4. How we use information and the legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Operating and maintaining the site and tools | Legitimate interest / contract |
| Authentication and account management | Contract |
| Subscription billing and access control | Contract |
| Customer support and billing enquiries | Contract / legitimate interest |
| Service notices (receipts, renewals, security, policy updates) | Legitimate interest / legal obligation |
| Security, fraud prevention, and abuse handling | Legitimate interest |
| Aggregate, non-identifying product analytics | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
We do not send marketing emails. We may aggregate or de-identify data for statistics; such data cannot identify you personally.
5. Cookies and tracking
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Login session and security | No |
| Functional | Language, theme, and consent preferences | Via browser settings |
| Advertising (Google AdSense) | Ad serving, frequency capping, aggregated reporting | Via cookie notice / ad settings |
This site is supported by advertising delivered through Google AdSense. Google and its partners may use advertising cookies (such as the DoubleClick cookie) to serve ads based on your prior visits. These requests carry only page-level context (URL, country-level region, device type) — advertisers never receive your name, email, or the files you process. You can opt out of personalized advertising at Google Ads Settings or www.aboutads.info. See also Google’s partner sites policy. If you decline non-essential cookies, you receive non-personalized ads.
6. Who we share information with
We do not sell your personal information, including as defined under CCPA/CPRA and similar laws. We share data only with the processors needed to run the Service, each under their own data-processing terms:
| Processor | Purpose | Data |
|---|---|---|
| Waffo Pancake | Payment processing as PCI-DSS compliant merchant of record | Email, order/billing metadata; card details handled directly by Waffo |
| Supabase Inc. | Authentication and account/subscription database | Email, display name, hashed credentials, subscription record |
| Cloudflare, Inc. | Hosting, CDN, and network security | IP address, request and log data |
| Google LLC (AdSense) | Advertising delivery and reporting | Ad cookies, page-level context, approximate region |
We may also disclose information where required by law, court order, or valid regulatory request, or in connection with a merger, acquisition, or asset transfer (with notice where practical and continued protection of the data).
7. International data transfers
Our processors operate infrastructure outside your country of residence (including Cloudflare’s global network and our database provider’s regions). Where personal data is transferred across borders, we rely on appropriate safeguards such as the processors’ standard contractual clauses and adequacy mechanisms recognized under applicable law.
8. Security
- All traffic uses TLS/HTTPS encryption.
- Passwords are stored only in salted, hashed form.
- Access to account and subscription data is restricted to the minimum necessary; the service-role credential used to process payment webhooks is never exposed to browsers.
- Database access is protected by row-level security policies.
If a security incident is likely to adversely affect your rights, we will notify you and, where required, the competent authority without undue delay and within 72 hours of becoming aware of it.
9. Retention
| Data | Retention |
|---|---|
| Account profile | While the account exists; deleted within 90 days of account deletion |
| Subscription records | While active and for 90 days after account deletion; billing/transaction records are kept as required by tax and accounting law (typically at least 5 years) |
| Support correspondence | Up to 2 years after the last contact |
| Security and request logs | Up to 12 months |
| Local preferences and model cache | Until cleared in your browser |
10. Your rights
Subject to applicable law (including GDPR and CCPA), you may request access to, correction of, or deletion of your personal data, restriction or objection to certain processing, data portability, and withdrawal of consent. You can exercise these rights by emailing privacy@feyard.com; we respond within 30 days. You can delete your account at any time by contacting hello@feyard.com. You also have the right to lodge a complaint with your local data-protection authority.
11. Marketing
We do not run marketing email campaigns. Emails you receive are service messages only — receipts, renewal notices, security alerts, and policy updates.
12. Children
The Service is not directed to children under 13 (or a higher age where required locally), and we do not knowingly collect personal information from them. Paid plans additionally require the account holder to be at least 18. If you believe a child has provided us with information, contact privacy@feyard.com and we will delete it promptly.
13. Third-party links
The site may link to third-party services (such as payment pages hosted by Waffo Pancake). This policy applies only to information collected by us; third parties govern their own data practices through their own policies.
14. Changes to this policy
Material changes will be announced at least 15 days before taking effect, via a site notice or email to registered users, and the “Last updated” date above will be revised. Continued use after the effective date constitutes acceptance.
15. Contact
- Privacy requests: privacy@feyard.com
- General support: hello@feyard.com
- Billing: billing@feyard.com
Operator: Weiqing Li, an individual operator in China. Website: feyard.com.