Privacy Policy

Depending on how you use the Service, we may receive both personal data and non-personal technical data:

• Telegram account data: Telegram ID, username, first and last name, and interface language — when you use the bot or sign in to the website with Telegram. To show your avatar on the website we request your Telegram profile photo if it is available to bots; it is kept only in server memory for a few hours and is never written to disk.
• Email address — if you sign in to the website with email or link an email to your account, once this option is available. Passwords are stored only as an irreversible hash.
• Images and videos you upload and the results created from them (see section 3).
• Payment data: amount, date, method, status and transaction identifier. Card and wallet details are entered on the payment provider's side; we do not receive or store them.
• Technical data: IP address, browser and device information (user agent), error logs, actions inside the bot and the website, and usage statistics.
• Anything you tell us when you contact support.
• Cookies and browser storage. The website uses a session cookie to keep you signed in. Your browser also stores the photo you picked before signing in, your interface preferences and the label of the source you came from (for example, an advertising campaign). The pages of nuderrai.com, except the web app at /app, use Yandex Metrica with its own cookies, including session replay (Webvisor); the web app has no analytics counter.

Uploaded images and videos are used only to fulfil your request and for the automatic age and safety checks. We do not use your materials to train or fine-tune AI models without your separate consent. We do not intentionally collect special categories of personal data.

• to provide the bot and the website and to sign you in;
• to process your image and video requests with AI;
• to keep records of payments, tokens and other operations on your balance;
• to protect accounts, prevent fraud and abuse, and limit suspicious activity;
• to answer support requests and handle complaints;
• to improve the Service and to comply with the law.

In the bot, the photo is processed for your request and the result is delivered to your private chat with the bot. Files and results may be kept for a limited time needed for processing, delivery, technical caching, backup and recovery after failures.

On the website, a photo you pick before signing in stays only in your browser and is sent to our server only when you start processing. On the server the source photo is never written to disk: it is processed in memory and discarded.

The finished result is stored on our server in encrypted form for 24 hours so that it is available in your gallery, which only your account can open. After that it is deleted automatically. The Delete button in the gallery erases a result immediately.

We do not sell personal data. Information is shared only where needed to run the Service or required by law:

• AI processing providers — the image needed to fulfil your request;
• an automated age-verification service — the image, to check that it does not show a minor;
• payment providers — the data needed to process a payment (amount, order number, account identifier);
• hosting providers — as operators of our infrastructure;
• Telegram — when you use the bot or sign in with Telegram;
• Yandex — visit statistics of the website pages (Yandex Metrica);
• competent authorities upon a lawful request, and others where necessary to prevent fraud, protect the rights of third parties or keep the Service secure.

• Results on the website — 24 hours, or until you delete them.
• Website sign-in sessions — up to 30 days after your last visit, or until you sign out.
• Sign-in confirmation codes — a few minutes.
• Account, balance and payment records — while the account exists and as long as accounting rules and the law require.
• Technical logs — for the limited time needed for security and troubleshooting.

We take reasonable technical and organizational measures to protect information against loss, unauthorized access, alteration or disclosure: connections to the website are encrypted, website results are stored encrypted, and access to data is limited to authorized persons and only to the extent needed to run the Service.

No transmission over the internet or Telegram is completely secure. You are responsible for the security of your Telegram account and your devices; sign out of the website on devices you do not control.

You are solely responsible for the legality of the materials you upload and for having the consent of every person shown in them.

• to receive information about how your data is processed;
• to delete a website result at any time with the Delete button;
• to ask support to update or delete your data where this does not conflict with legal or technical requirements;
• to stop using the Service at any time.

We are not liable for the actions of third parties, including Telegram, payment systems, internet providers and other external services, or for consequences of malicious actions, technical failures or other circumstances beyond our reasonable control. You use the Service at your own risk.

We may change this Policy unilaterally. The current version is published on this page; continued use of the Service after a change means you accept the new version.

This Policy is governed by applicable law. If any provision is found invalid, the remaining provisions stay in force. For any questions about your data, contact support: @nuderrai_support on Telegram.