bgless

Privacy Policy

Last updated: 3 October 2026

In short: We use your images only to remove their background, delete them within 1 hour and never use them for model training. We use no analytics or advertising cookies. Your card details never reach us; payments are handled by Paddle.

1. Controller

This policy explains how personal data is processed for the Service offered at bgless.com. The controller is bgless.com. Contact: info@bgless.com.

2. Data we process

Account data

Your email address and password. We never store your password in plain text; we keep only a one-way hash (Argon2).

Images you upload

Images are processed only to remove the background and deliver the result to you. To enable HD downloads the result is kept on the server temporarily and deleted automatically within 1 hour. We never share your images or use them to train AI models. Edits such as backgrounds, shadows and cropping happen entirely in your browser.

Usage and credit records

The number and resolution of processed images, credits spent and purchased, and their dates — kept to show your balance and monthly usage.

API keys

Only a one-way hash of each key and its first 10 characters (so you can recognise it) are stored.

Payment data

Payments are processed by Paddle.com. Your card or bank details never reach us; we receive only the transaction ID and the pack purchased.

Visit statistics

To understand how the site is used we count page views anonymously: the page visited, the domain of the site you came from (if any), your country (as determined by Cloudflare from the connection), browser language and device type (mobile, tablet or desktop). To tell repeat visits within the same day apart, your IP address and browser details are turned into a one-way code using a secret key that changes every day. Your IP address is not stored, and because the previous day’s key is deleted we cannot recognise you across days. No cookies are used for this.

Technical data

Your IP address is held briefly in server memory to prevent abuse (e.g. rate limiting) and is not stored permanently. Our infrastructure provider Cloudflare processes connection data to deliver and protect the site.

3. Purposes and legal bases

These correspond to the legal bases in Article 5 of Turkish Law No. 6698 (KVKK) and Article 6 of the EU GDPR.

4. Cookies and local storage

We use no analytics, advertising or tracking cookies. All site files, including fonts, are served from our own domain. Paddle may set its own cookies when the checkout opens.

5. Service providers and transfers

These providers may process data outside Türkiye. Transfers are made with safeguards required by applicable law. We do not sell your data or share it for advertising.

6. Retention

7. Your rights

Under KVKK Article 11 and the GDPR you have the right to access your data, request correction or deletion, object to processing and receive your data in a portable format. You can delete your account directly from your account page. For other requests write to info@bgless.com; we respond within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority or the data protection authority of your country.

8. Security

All connections are encrypted with HTTPS. Passwords are hashed with Argon2, API keys are stored as hashes, and our server is not directly exposed to the internet.

9. Children

The Service is not directed at children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy; the current version is always available on this page.