Privacy Policy
AltTextLab (“we”, “our”, “us”) is an AI-powered image alt-text generation service, registered in Poland.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, where it is stored, and what rights you have in relation to your data.
This Policy applies to:
- Visitors to our website at alttextlab.com;
- Users who register for and use the AltTextLab API or dashboard;
- Business customers and their authorised users who integrate AltTextLab into their own products or workflows.
If you have any questions about this Policy, please contact us at contact@alttextlab.com.
Data We Collect
Account and Registration Data
When you create an AltTextLab account, we collect:
- Email address (used for authentication and service communications);
- Authentication tokens and session data managed by Google Firebase Authentication;
- Account preferences and settings.
API Usage and Content Data
When you use the AltTextLab API to generate alt text, we process:
- Image URLs (public links provided by you) — retained for the duration of the customer's active account; deleted upon account termination. The image itself is not retained.
- Image files (when submitted in Base64 format) — stored in private AWS S3 until deletion is requested; deleted upon verified customer request within 30 days
- Contextual metadata you supply alongside an image, such as page title, product name, brand, keywords, or other descriptive context, used to improve alt-text generation accuracy;
- API request metadata: timestamps, endpoint called, response status, credit consumption — used for billing, rate limiting, and service improvement.
Contextual metadata you submit may, in some cases, incidentally contain personal data (for example, a person’s name in a product description or image context). We process such data solely on your instruction to generate alt text and do not use it for any other purpose.
Payment and Billing Data
Payments are processed by Paddle, our payment provider and merchant of record. We do not collect or store credit card numbers or bank account details. We retain subscription plan information, transaction history, and billing email address.
Usage Analytics Data
We use PostHog and Google Analytics to understand how our website and product are used. These tools may collect pages visited, browser and device type, IP address (anonymised where possible), referral source, and feature usage events. Analytics cookies are placed only with your consent.
Communications Data
If you contact us via our contact form or email, we collect your name, email address, and message content, used solely to respond to your enquiry.
How we share your data
We do not sell your personal data. We only share data with:
- Paddle, our payment processor.
- Hosting and infrastructure providers (e.g., Amazon Web Services).
- Legal authorities, if required by law.
Each third party only receives the minimum necessary data and is required to protect it under data protection laws.
Data storage and security
We use modern security practices to protect your data, including encryption and access controls. Your generated content may be stored temporarily on our servers to provide access within your account. You can delete your data at any time.
Your rights
Under GDPR and similar laws, you have the right to:
- Access the data we hold about you.
- Correct or update your data.
- Delete your account and associated data.
- Object to processing or request data portability.
To exercise your rights, email us at contact@alttextlab.com.
Cookies
What are Cookies?
Cookies are small text files stored on your device when you visit a website. We use cookies to enable core functionality and, with your consent, to analyse how the site is used.
Cookie Categories
- Strictly Necessary - Required for the website and service to function. Includes authentication session cookies (Google Firebase Authentication) and security tokens. These cannot be disabled; no consent required.
- Analytics - PostHog and Google Analytics (GA4) cookies that collect information about how visitors use the site. Only placed after you accept analytics cookies via our cookie banner.
- Functional - Cookies that remember your preferences (language, cookie consent choice). These improve your experience but are not strictly necessary.
Cookie Consent
We use Cookie Script to manage cookie consent. When you first visit alttextlab.com, you will be shown a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site. Rejecting analytics cookies does not affect your ability to use the AltTextLab service.
International data transfers
Our primary cloud infrastructure is hosted by AWS in the us-east-1 region (United States). Some sub-processors also process data in the United States or other countries outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure that an appropriate safeguard is in place as required by GDPR Chapter V.
The primary transfer mechanisms used by our sub-processors are:
- EU-US Data Privacy Framework (DPF): AWS, OpenAI, Google, and Cloudflare are certified under the EU-US DPF, which provides an adequacy determination for transfers to participating US organisations.
- Standard Contractual Clauses (SCCs): Where DPF certification is not available or as an additional safeguard, transfers are covered by the European Commission’s Standard Contractual Clauses (Commission Decision 2021/914).
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we’ll revise the "Effective Date" above. Continued use of the Service indicates acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: contact@alttextlab.com
Website: alttextlab.com
