Enhancor

GDPR overview

The retrieved documents contain no mention of the GDPR at all. The privacy policy states it is designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 on the protection of personal information in the private sector, not with the European regulation. The rights announced in section 4 are access, rectification, deletion and objection to marketing; they are exercised through the generic contact form, with no dedicated privacy address and no data protection officer named. No Article 27 EU representative appears anywhere, and no data processing agreement is published. Governing law is the province of Quebec and Canadian federal law, with the courts of Montreal. European users should read this as GDPR compliance never claimed, rather than merely undocumented.

Who owns the data?

Section 6 of the terms is explicit: you own and retain all right, title and interest in your Customer Input, meaning the images and prompts you upload stay yours. In exchange you grant the publisher, Create Without Limits Technologies Inc., a non-exclusive, royalty-free, worldwide licence to reproduce, store, display and modify that content, stated as being solely to provide and improve the Services. Ownership splits at one point: the company owns all rights to Usage Data, defined as anonymised or aggregated data which may be derived from Customer Input. The privacy policy lists what is collected: account details such as name and email, uploaded images, preferences and usage data.

Reuse rights

Because you keep ownership of your Customer Input under section 6, nothing in the retrieved terms requires you to ask the publisher for permission before reusing your own uploads and results; the limits that do apply are the prohibited-use rules of section 8, not a licence restriction. On the publisher's side, Customer Input is processed to provide and improve the Services. Usage Data is used more broadly: analytics, monitoring, support, and, in the words of the terms, to design and develop Company's products and AI models. Since Usage Data is defined as anonymised or aggregated data which may be derived from Customer Input, material originating in your uploads can legitimately feed model development. No opt-out mechanism was found anywhere in the retrieved documents. Section 3 of the privacy policy states there is no sale and no sharing of personal information, except under legal obligation, with explicit consent, or with service providers. Section 8.6 of the terms reserves the right to monitor prompts, uploads, outputs, logs, IP addresses and billing activity, using both automated tools and human review.

Data retention & training

Hosting summary

No hosting country and no hosting region is published on any of the retrieved pages: neither the privacy policy nor the terms name a data centre, a cloud provider or a jurisdiction of storage. What can be observed is technical, not contractual. The marketing site resolves to IP 76.76.21.21, an anycast node geolocated in the United States; images are served through an Amazon CloudFront CDN (d2qrb904tbc8rh.cloudfront.net); the product API answers on enhancor-server.vercel.app. These are infrastructure signals only. They indicate where traffic is served, not where uploads are stored, and none of them constitutes a commitment by the publisher. The one firm jurisdictional element is corporate and legal: the publisher, Create Without Limits Technologies Inc., is Canadian, and the terms place governing law in the province of Quebec with the courts of Montreal. That settles who you would sue and where, not where your images physically sit. Anyone bound by a data residency requirement should obtain a written answer before subscribing, because nothing published answers the question.