Privacy Policy

AYA MIM S.R.L., registered in Romania, is the data controller for the processing described on this page.

• Email: contact@aya.software

AwaCut processes images 100% locally on your machine. The AI model ships inside the app.

• Your images are never uploaded to us or to anyone else.
• No account is needed to use the app.
• The app sends us a few anonymous signals about how far it got: first opened, opened again on a later day, first photo processed (with roughly how long it took), the kind of error the first time something fails, the 10 free photos used up (with roughly how many were still waiting), Buy clicked, and a key activated. From version 1.0.7 also the first photo converted in Convert Images (with the format it went to) and its 10 free conversions used up. Each carries only the platform, the app version, the time and a random install number, never images, file names, your licence key or your computer's name. We keep the country, not your IP address. We delete them after 2 years. We use them, on the basis of legitimate interest, to see where the app falls short.
• The app also checks dl.awacut.com for updates, announcements and tutorials; like any website visit, these requests reach our server with your IP address, which we do not store.

When you activate or validate your licence, the app contacts Polar. That request contains your licence key and a machine label (hostname) used to count device activations, never your images, file names or any file contents. Licence activation is handled through Polar (polar.sh), our merchant of record.

From version 1.0.7 the activation also carries an anonymous code for this computer: a one-way hash of the ID your operating system gives the machine, never the ID itself. It lets the same computer keep its activation after a reinstall. If every activation of your key is already in use, the app sends your key, that code and the machine label to our own server (licence.awacut.com), which asks Polar whether one of those activations already belongs to this computer and, if so, lets the app use it again. We do not store anything from that lookup.

Purchases are processed by Polar (polar.sh) as merchant of record. Polar collects the data needed to process your order (name, email, billing country, payment details) under its own privacy policy. We never see or store your card details. We receive your email address and order details so we can deliver the licence key and provide support.

This website is a static site and sets no cookies. What it keeps in your browser, and what it sends, depends on your choice in the consent banner:

• Always, because the site needs it: your consent choice (up to 12 months) and, for the length of your visit, the page you came from, so the menu and the language chooser can take you back. Anonymous counts of visits, downloads and clicks on Buy go to our own server with the page and, when the link you arrived by names one, the campaign or website you came from (for example an ad campaign or AlternativeTo). The same campaign name travels with an order to our payment provider. These counts carry no identifier.
• Analytics: Cloudflare Web Analytics, which measures page loads and speed without cookies.
• Marketing: if you arrive from a Google Ads click, we keep Google's click identifier (gclid), the campaign and the search keyword for your visit, so that a download can be reported to Google Ads as a result of that click.

Where you are decides the default. In the European Union and the EEA, the United Kingdom, Switzerland, Turkey and Brazil, analytics and marketing stay off until you allow them in the consent banner. Elsewhere they are on from your first visit, and you can turn them off at any time. We tell the region from the country Cloudflare reports for your connection; when it cannot be told, you get the banner. If your browser sends a Global Privacy Control signal, we treat it as turning both off.

You can change your choice at any time via the "Your Privacy Choices" link at the bottom of every page.

The site is served through Cloudflare's global network, which may process technical data (such as your IP address) to deliver and secure the site.

Tutorial videos on this website are hosted on YouTube. A video loads only when you press play, and then from YouTube's privacy-enhanced domain (youtube-nocookie.com); from that moment Google receives technical data such as your IP address, under its own privacy policy.

We process data on the following grounds (GDPR Art. 6):

• Consent (lit. a): website analytics and the Google Ads click measurement described above.
• Performance of contract (lit. b): processing your order, delivering and activating your licence, support.
• Legitimate interest (lit. f): securing the site, preventing licence abuse, and understanding how the app and this website are used, through the anonymous signals and counts described above.
• Legal obligation (lit. c): accounting and tax records.

• Order and licence records: for as long as your licence is active, plus the retention periods required by Romanian accounting law.
• Support correspondence: up to 3 years after the last contact.
• Cookie consent choice: stored in your browser for up to 12 months.
• Anonymous app signals: 2 years.

Your images are never in our hands, so there is nothing for us to retain or delete.

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase data that is no longer needed.
• Restrict or object to processing.
• Portability: receive your data in a structured format.
• Withdraw consent at any time.
• Complain to a supervisory authority, in Romania, the ANSPDCP, or the data protection authority of your country.

To exercise any right, email contact@aya.software. We respond within 30 days at most.

We may update this policy as the product evolves or legal requirements change. The date above reflects the most recent revision; the current version is always available on this page.

For privacy questions or to exercise your rights, email contact@aya.software.

This page is provided for information and is not legal advice.