Privacy Policy

Who we are: Mizan AI is operated by Nur Studios LLC ("Mizan", "we", "us"). Contact: support@mizanai.app. Mailing address: 650 Ponce De Leon Ave NE Suite 300 #2174, Atlanta, GA 30308.

The short version

• Your photographs never leave your Mac. The Mizan desktop app sorts photos locally using a vision model that runs on your computer. We do not receive, store, view or train on your photos, their filenames, their metadata, your chapter labels or your corrections.
• We collect very little. To sell and support the software we hold your email address, subscription and payment-status information received from Stripe, your license key, and a one-way hash that identifies each Mac you activate, together with that Mac's hardware model.
• No analytics or advertising pixels are installed on this website. Mizan does not currently set analytics or advertising cookies. Hosting providers may process technical information needed to serve and protect the website.
• We never sell personal information and we disclose it only for the service, legal and business-transfer purposes described below.

1. Information we collect and why

1.1 Website visitors (mizanai.app)

The website is served by Cloudflare. Cloudflare processes technical request information, such as IP address, browser headers, requested pages and request times, to deliver and protect the service.

Cookies and measurement. The current website does not include Google Analytics, advertising pixels or a marketing cookie banner. If we introduce optional analytics or advertising tools, we will update this policy and provide any choices required before enabling them.

Website fonts. The website loads DM Sans and Instrument Serif through Google Fonts. Your browser requests the font stylesheet and font files from Google's servers. Google therefore receives technical request information, such as your IP address and browser headers, to deliver the fonts. This is separate from analytics or advertising measurement. Google's font service practices are described at https://fonts.googleblog.com/2022/11/your-privacy-and-google-fonts.html.

If you request the beta, we store your email address, the time you signed up, the version of the consent text you saw and the signup source (home, pricing or beta page). We use your address to send the beta download link and tester guide, and to send the occasional product updates described next to the form. We use Resend to deliver these emails and record the last send time, total successful sends and recent send attempts to limit repeated requests to three per address per hour. The download and guide links are included in the email, not displayed on the public website. The beta download and tester guide are hosted by Google Drive / Google Docs; opening them sends technical request information, such as your IP address, to Google. Joining does not authorize payment or start a subscription. You can stop beta emails by contacting support@mizanai.app or confirming the unsubscribe link included in a beta message. We then delete your email address, signup details and local send-attempt records, retaining only a keyed one-way suppression marker and opt-out time to prevent further beta emails. The suppression marker cannot be used by itself to recover your email address. Essential license and billing messages for an active subscription are unaffected.

1.2 Customers who buy a license

When you buy a license, Stripe collects your name, email address, billing address and payment card details and processes the payment. We never see your full card number. Stripe shares with us your email address, the plan you chose, and the status of your subscription (active, renewed, cancelled, payment failed).

We generate a license key for you and store it with your email address, the plan, the dates it was issued and expires, and the number of Macs it allows. We use Resend to send license and account emails. These messages can include your license key, plan, validity dates, and a link to Stripe’s customer portal for managing billing. We also retain the Stripe customer and subscription identifiers associated with your license. The portal lets you manage payment details, view receipts and cancel future renewals; Stripe processes the information you submit there.

1.3 Activating and using the app

When you activate Mizan on a Mac, the app sends our license server:

• your license key;
• a device identifier, which is a one-way cryptographic hash derived from the Mac's hardware identifier (we cannot recover the hardware identifier from it); and
• the Mac's hardware model name (for example "MacBookPro18,2"), so that you can recognise which Mac is which if you need to deactivate one.

The app repeats this check periodically while it is open and online, so we also know approximately when each activated Mac last contacted us. We use this information only to enforce the number of Macs your plan allows, to stop cancelled or refunded licenses from being used, and to refresh short-lived keys.

Photo organization does not upload gallery information. The app does not automatically send photos, previews, thumbnails, filenames, folder paths, camera serial numbers, EXIF data, the names of your galleries, your chapter assignments or corrections, your settings, crash reports or usage statistics. License and model-download servers also receive the technical information needed to handle requests, such as your IP address. The app downloads its vision model from Hugging Face when you set it up; that download reveals your IP address to Hugging Face in the same way any download does.

1.4 Support

If you email us, we keep the correspondence so we can help you. The app can generate a diagnostics report locally on request. It includes app and model versions, platform and architecture, aggregate photo and category counts, correction-action counts, and recent operation information and timings. It is designed to exclude photos, filenames, paths and personal identifiers. You can inspect it before choosing to share it with support. Reports are not uploaded automatically. Please avoid sending client photos or private gallery information in support messages unless specifically needed and you have the necessary permissions.

2. What we do not do

• We do not sell, rent or trade personal information.
• We do not use your data to train artificial-intelligence models.
• We do not process biometric identifiers. The vision model scores whole images for chapter placement; it does not detect, measure or recognise faces or individuals, and the app does not create face templates.
• We do not profile you or make automated decisions with legal or similarly significant effects.

3. Who we share information with

We use the following providers for the purposes described below. Some, such as payment and font providers, also process information under their own privacy policies:

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.

4. How long we keep information

• Beta-list emails and signup details: until you unsubscribe or ask us to delete them, or until 12 months after launch, whichever is first. Recent send-attempt records are routinely pruned. After an opt-out we retain only a keyed suppression marker and the opt-out time to honor your choice, until you ask for their deletion or 12 months after launch, whichever is first. Resend and Google process their own technical delivery and request records under their respective policies.
• License records (email, key, plan, dates, activations): while your license is active and for 3 years after it expires or is cancelled, for accounting and to handle disputes, then deleted.
• Stripe retains payment records according to its own policy and legal obligations.
• Support correspondence: 2 years after the matter is closed.

5. Your rights and choices

Depending on where you live you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, and to withdraw consent. You can exercise these rights by emailing support@mizanai.app. We will respond within 30 days (45 days where the law allows) and will verify your identity by confirming control of the email address on the account. We do not discriminate against anyone for exercising their rights.

• Stop beta emails: email support@mizanai.app or use an unsubscribe option in a beta message. Essential license and billing messages may continue while needed to provide your subscription.
• Delete your account data: email us. We will assess and act on your request under applicable law, retaining records only where required for legal obligations or a permitted purpose such as resolving a dispute. Deleting information needed for a license may end your ability to activate the software.
• Deactivate a Mac: Settings → License → Deactivate this Mac, inside the app.

California residents: we do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA, and we have not done so in the past 12 months. The categories we collect include identifiers and contact information (such as email address, IP address and hashed device identifier), commercial information (such as purchase and subscription status), technical request information, and any information you choose to provide to support. You may designate an authorised agent to make requests on your behalf.

European Economic Area, United Kingdom and Switzerland: our legal bases are performance of a contract (selling and licensing the software), our legitimate interests (securing the service, preventing license abuse, keeping business records) and consent (the beta list). You may complain to your local supervisory authority. The website and license service are hosted in the United States; providers may also process information in other countries. Where applicable law requires safeguards for international transfers, we use appropriate safeguards. Contact support@mizanai.app for information about the safeguards that apply to your data.

6. Security

License records are stored in an access-controlled database; license keys are cryptographically signed and verified; communication with our license server uses TLS; license-email delivery logs use a hashed recipient handle rather than the recipient’s email address. Technical request information may be used to protect the service, including rate limiting. No system is perfectly secure, and we will notify affected customers and regulators of a breach as the law requires.

7. Children

Mizan is a professional tool and is not directed at children under 16. We do not knowingly collect information from children. The photographs you process with Mizan may include children; those photographs stay on your Mac and are never sent to us.

8. Changes

We will post changes here with a new effective date and, for material changes, email customers with an active license.

9. Contact

support@mizanai.app · Nur Studios LLC, 650 Ponce De Leon Ave NE Suite 300 #2174, Atlanta, GA 30308