Informativa sulla Privacy

Ultimo aggiornamento: 1 gennaio 2026

1. Sintesi

Rispettiamo la tua privacy. Raccogliamo i dati minimi per far funzionare ImageSEO. Non vendiamo i tuoi dati. Non addestriamo modelli IA di terze parti sulle tue immagini. Siamo conformi al GDPR UE, al UK GDPR e al CCPA californiano.

2. Chi siamo

ImageSEO is a product that generates AI-powered alt text, image filenames, and captions for WordPress websites. The service is accessible at imageseo.io and app.imageseo.io. For the purposes of data protection law, ImageSEO is the data controller of personal data collected through this site and the product.

Le domande su questa informativa vanno inviate al nostro team di supporto.

3. Dati che raccogliamo

Dati dell’account

• Email address (required to create an account and send transactional emails)
• First and last name (optional)
• Password, stored as a cryptographic hash (we never see or store it in plaintext)
• Billing address and VAT number if you purchase a paid plan

Dati di utilizzo

• WordPress site URL(s) connected to ImageSEO
• Number of images processed
• Language preference
• Anonymous aggregate analytics (Google Analytics 4 with IP anonymization)

Dati di pagamento

• Handled entirely by Stripe. We never see, store, or process your full card number. We store only a Stripe customer ID and the last four digits of your card for invoice display.

Dati tecnici

• IP address (for fraud prevention and rate limiting; discarded after 30 days)
• Browser type and user-agent string
• Server logs for debugging (retained for 14 days, then auto-deleted)

4. Perché li raccogliamo

• To provide the service. We need your email to create your account. We need your WordPress URL to know where to send optimized content back.
• To bill paying customers. Stripe handles card data; we only see what Stripe sends back.
• To improve the product. Aggregated, anonymized usage analytics help us understand which features matter.
• To comply with the law. Invoices, tax records, refund history — kept as long as local law requires.

The legal basis for processing is a combination of contractual necessity (you signed up for the service), legitimate interest (product improvement, fraud prevention), and legal obligation (tax and billing records). For marketing emails, consent.

5. Come gestiamo le tue immagini

When ImageSEO analyzes an image from your WordPress media library, we send a secure copy to an AI model running on our infrastructure or a trusted AI provider. The model returns suggested alt text, filenames, and captions. The image itself is discarded from our systems within 24 hours.

We never modify or overwrite the original image file on your server. The only data we write back to your WordPress site is text metadata (alt attributes, title attributes, filenames).

If you delete your ImageSEO account, all image-derived metadata we stored is also deleted.

6. Modelli IA e addestramento

ImageSEO uses large language models and vision models from trusted providers to generate alt text. We do not train third-party models on your images or content. When we send an image to an AI provider, we explicitly opt out of data retention and training where the provider supports it.

Our own models, if any, are trained only on aggregated, anonymized data and never on individual customer content.

7. Con chi condividiamo i dati

We only share data with providers strictly necessary to run the service. These are our “sub-processors”:

• Stripe — payment processing (USA / EU data centers)
• Hostinger — infrastructure hosting (EU data centers)
• Google Analytics — anonymous traffic analytics (IP anonymized)
• Transactional email provider — for account, billing, and support emails
• OpenAI / Anthropic / Google — AI inference for alt text generation (opt-out of training enabled)

Non vendiamo mai i tuoi dati personali. Non li condividiamo con inserzionisti. Non li passiamo a data broker.

8. Conservazione

• Dati dell’account: retained while your account is active. Deleted within 30 days of account closure.
• Invoices and billing records: 10 years (EU and US tax law requirement).
• Server logs: 14 days.
• IP addresses: 30 days.
• Images sent for AI processing: 24 hours.

9. I tuoi diritti (GDPR)

Se ti trovi nell’UE, nel Regno Unito o in California, hai il diritto di:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (“right to be forgotten”)
• Export your data in a portable format
• Object to processing based on legitimate interest
• Withdraw consent for marketing emails (unsubscribe link in every email)
• Lodge a complaint with your local data protection authority

Per esercitare questi diritti, scrivici dalla pagina di supporto. Rispondiamo entro 30 giorni.

10. Cookie

We use strictly necessary cookies for login, language preference, and fraud prevention. We use Google Analytics cookies for anonymous traffic analytics. We do not use advertising cookies. We do not track you across other websites.

You can disable non-essential cookies via your browser settings. The site will still work.

11. Sicurezza

All data is transmitted over HTTPS with TLS 1.2 or higher. Passwords are hashed with bcrypt. Databases are encrypted at rest. Access to production systems is restricted by role, logged, and audited. We use 2FA on all internal tools.

If we ever suffer a data breach that affects your personal data, we will notify you within 72 hours as required by GDPR.

12. Contatti

Per qualsiasi domanda sulla privacy, contattaci dalla pagina di supporto. Di solito rispondiamo entro 1 giorno lavorativo.

This policy may be updated from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated by email to active customers.