Privacy Policy

1. Who we are

NSS Background Remover (“the tool,” “we,” “us”) is a product of Novus Stream Solutions, based in Ontario, Canada. This policy governs use of the tool at bgremover.novusstreamsolutions.com. For questions, see Section 9.

2. What we do not collect

The following is an exhaustive list of data we do not collect, process, or have access to:

• The images or videos you upload or process
• The images or videos you export or download
• Filenames of any images or videos
• Your name, email address, or any personal identifier
• Your IP address (beyond what Vercel’s CDN logs, see Section 4)
• Device identifiers or fingerprints
• Browsing history outside this site
• Location data
• Any data entered into the brush editor or settings
• IndexedDB session data — this lives entirely in your browser and never leaves it

All AI processing — background removal, video processing, upscaling, filtering, and all other tool operations — runs exclusively in your browser using WebAssembly and WebGPU. There is no server that receives your image or video data. This is an architectural constraint, not merely a policy promise.

3. What we do process (minimally)

4. Third-party services

5. Your rights (PIPEDA)

This service is subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario’s applicable privacy legislation.

Because we collect essentially no personal information, there is little data to access, correct, or delete. However, you have the right to:

• Request confirmation of what personal information (if any) we hold about you
• Request correction of any inaccurate personal information
• Withdraw consent to analytics or advertising at any time via “Manage cookies” in the footer
• Clear all locally stored data by clearing your browser storage for this site

To exercise these rights, contact bgremover@novusstreamsolutions.com.

5a. Additional rights for EU/EEA users (GDPR)

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) grants you the following additional rights with respect to any personal data we process:

• Right of access (Art. 15): Request a copy of any personal data we hold about you and information about how we process it.
• Right to erasure (Art. 17): Request deletion of your personal data. Because we hold essentially no personal data, this primarily concerns any analytics data associated with your session (which Vercel Analytics holds anonymously and cannot link back to you).
• Right to data portability (Art. 20): Receive any personal data you have provided to us in a structured, machine-readable format and transfer it to another controller.
• Right to object (Art. 21):Object to processing of your personal data for analytics or advertising at any time via “Manage cookies” in the footer.
• Right to restrict processing (Art. 18): Request restriction of processing in certain circumstances.
• Right to lodge a complaint: You have the right to lodge a complaint with your local supervisory authority (Data Protection Authority).

Our legal basis for processing analytics data (when consented) is your explicit consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time. Our legal basis for infrastructure-level data processing (Vercel CDN logs) is legitimate interest (Art. 6(1)(f) GDPR) in delivering the Service securely.

To exercise these rights, contact bgremover@novusstreamsolutions.com. We will respond within 30 days.

5b. Additional rights for California residents (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act (CCPA) and its amendment (CPRA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose, and the categories of third parties we share it with.
• Right to delete: Request deletion of personal information we have collected. As stated above, we collect essentially no personal information — any requests will be acknowledged within 45 days.
• Right to opt-out of sale or sharing: We do not sell or share your personal information. We do not engage in targeted advertising using personal data. If this changes, we will update this policy and provide an opt-out mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact bgremover@novusstreamsolutions.com with the subject “CCPA Request.” We will respond within 45 days.

5c. AI processing disclosure

All AI processing on this Service occurs exclusively on your device using WebAssembly (WASM) and WebGPU/WebGL. No image, video, or audio data is transmitted to any AI inference server, cloud API, or external service. Models are organised into opt-in tiers — nothing downloads until you choose to, and the “Lite” classical tools download nothing at all. The AI models used include:

• Background removal — RMBG-1.4 (fast, BRIA AI RMBG-1.4 Community License) and BiRefNet / RMBG-2.0 (best quality, BRIAAI License 1.0), from Hugging Face CDN.
• Understand cluster — image captioning (BLIP / ViT-GPT2), CLIP zero-shot tagging & similarity, OCR, document Q&A, and depth estimation, via Transformers.js from Hugging Face CDN.
• Video & audio AI — Whisper speech-to-text for subtitles, plus classical scene / highlight / reframe heuristics that run with no model download.
• Upscaling — Swin2SR / Real-ESRGAN-class super-resolution, from Hugging Face CDN.
• Pro tier (WebGPU) — SD-Turbo text-to-image and GFPGAN face restoration (managed ONNX, GB-scale, downloaded only on Pro opt-in).
• Bring-your-own ONNX (Pro) — if you enter your own model URL, your browser downloads it directly from the host you specify. We never see that model or your data; you are responsible for the licence and trustworthiness of any model you supply.

Model weights are downloaded once per browser profile, cached locally (see Section 3.2), and deletable anytime from the Model Manager. They contain no personal data. You can verify on-device processing using your browser’s Network tab — after a model downloads, no requests containing your image, video, or audio data are made.

AI output is probabilistic and may be imperfect or contain errors. You are responsible for reviewing all AI-processed and AI-generated output before use.

5d. Data breach notification

Because we do not collect, store, or process personal data on our servers, a traditional data breach affecting our infrastructure would not expose your images, videos, or any personal data (we hold none). However, if a security incident occurs that could materially affect users (e.g., a compromise of the static assets served to your browser), we will:

• Post a notification on our homepage within 72 hours of discovery
• Notify affected users where contact information exists within 72 hours
• Notify relevant supervisory authorities (e.g., Office of the Privacy Commissioner of Canada) within 72 hours if required by applicable law
• Publish a post-incident report at /changelog within 7 days

To report a security vulnerability, see our Security Policy.

6. Data retention

All session data (images, masks, history) is stored locally in your browser’s IndexedDB and is never transmitted to us. It persists until you clear it (via the “Clear session” button or by clearing site data in your browser). We have no ability to access or delete it on your behalf.

Consent preferences stored in localStorage persist until you clear your browser data or change your preferences via “Manage cookies” in the footer.

7. Children’s privacy

This service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us at bgremover@novusstreamsolutions.com and we will take appropriate steps.

8. Changes to this policy

We may update this policy periodically. Material changes will be noted in the version history below. Continued use after changes constitutes acceptance of the updated policy.

9. Contact

Privacy questions: bgremover@novusstreamsolutions.com
General: bgremover@novusstreamsolutions.com

Version history