Privacy Policy

Lazuli Inc. (the “Operator”) handles what you entrust to Pashaly (the “Service”) as follows.

1. We keep 10 kinds of data

• Images: the images you capture, the videos you record, and the images you import
• Titles: the name of the page when captured (the tab title), so you can find it from another computer. Visible only to you
• Page URLs: the address of the page open when captured, so you can open the original page from another computer. Visible only to you
• Original images and annotations: only for images you annotated, so you can keep editing from another computer. Visible only to you
• Folder names: the names you gave them, including which images are in which folder
• Owner token: a meaningless string that shows who an image belongs to
• Email address: for logging in. When you send a share link by email, it is shown to the recipient as the sender
• Share email recipients: the addresses you enter when sending a share link by email. Used only to send, and not kept
• Image passwords: only when you protect an image with a password. Stored in an irreversible form (a hash)
• Timestamps: when images were uploaded or replaced, when folders were changed, and when you logged in

2. We don't read text in images

We don't read or store text that appears in images. We don't collect names, addresses, phone numbers, or location data either.

3. What we use it for

To let you share images by link, to let you use the same images, folders and annotations from another computer, to let only the owner replace or delete them, to send emails with login codes and share links, and to count requests to stop abuse. We use it for nothing else.

4. Anyone with the link can see the image

Links are too long to guess, but anyone who has the link can open it. Password-protected images can only be seen by people who also know the password. There is no public listing or search, and pages are set not to appear in search engines. The Operator looks at images only when needed to handle a report or investigate a failure.

5. Data is stored with Cloudflare and Resend

Images, titles, page URLs, original images and annotations, folder names, owner tokens, email addresses, image password hashes, and timestamps are stored on and served from servers of Cloudflare, Inc. Connection logs (such as IP addresses) are retained for a period under that company's terms. Login emails and share-link emails are sent through Resend, Inc., so your email address and the recipients' addresses are passed to that company. The Operator itself keeps no record of which image was seen by whom or when. We only count requests.

6. When you delete it, it's gone from our side too

When you delete an image, it is deleted from our side too, including its title, page URL and annotations. Images stay until you delete them. When you close your account, we delete your images, titles, page URLs, annotations, folders, login data and email address. Reported images are made private immediately without waiting for review, and restored if the report turns out to be wrong.

7. We don't use cookies

The Service's pages don't use cookies.

8. Contact

For reports and inquiries, contact hello@pashaly.app.

9. Changes

When this policy changes, we'll announce it on this page.

Effective Sep 24, 2026 · Revised Sep 25, 2026 (added titles and folder names) · Revised Sep 26, 2026 (added page URLs, original images and annotations) · Revised Sep 27, 2026 (added image passwords, share email recipients and recorded videos; login changed to a code)