Privacy Policy

Effective Date

This Privacy Policy is effective as of April 8, 2026.

Scope

This Policy applies to our data processing activities when you use the image upload and prompt generation Service.

Data We May Collect

Depending on how you use the Service, we may collect:

• Upload and generation data: uploaded images, input text, parameter settings, generated prompts.
• Technical and log data: IP address, device/browser metadata, timestamps, error logs, request frequency, and baseline anti-abuse records.
• Contact data: name, email, and message content when you contact us.
• Cookie/local storage data: for core functionality, language preferences, security, and analytics (if enabled).

The current version does not require account registration by default. We therefore generally do not rely on account profile data unless you contact support, subscribe to emails, or use future account features.

How We Use Data

We may use data to:

• Provide and maintain the Service (including image processing, prompt generation, and debugging).
• Enforce quotas, rate limits, abuse prevention, and security auditing.
• Improve model quality, product usability, and system performance.
• Respond to support requests, complaints, and compliance inquiries.
• Comply with legal obligations and valid regulatory/law-enforcement requests.

Legal Bases

Where required by law, we process data based on:

• Performance of the Service.
• Legitimate interests (security, abuse prevention, performance).
• Your consent (such as optional cookies or marketing subscriptions).
• Compliance with legal obligations.

Data Sharing and Third Parties

We do not sell personal information. We may share data when necessary with:

• Cloud infrastructure, object storage, CDN, and security providers.
• AI model/inference providers to fulfill generation requests.
• Analytics, monitoring, email, and customer-support tooling providers.
• Authentication, billing, and fraud-prevention providers for future login/payment features.
• Authorities or counterparties where legally required or necessary to protect rights and safety.

Retention

• Uploads and outputs may be temporarily cached or stored for service delivery and reliability.
• Logs and security records are retained under a data-minimization principle and deleted or anonymized when no longer needed.
• Retention periods vary by data type and may be extended when legally required.

International Transfers

Because we and our service providers may operate in different jurisdictions, your data may be transferred to and stored outside your country. We take reasonable safeguards for such transfers.

Your Rights

Subject to applicable law, you may have rights to access, correct, delete, restrict processing, withdraw consent, data portability, and complaint. You can submit requests by email.

Children

We do not knowingly provide the Service to children where prohibited by law. If you believe a child submitted data without proper consent, contact us.

Security

We implement reasonable technical and organizational safeguards to reduce risks of unauthorized access, misuse, or disclosure. No system is absolutely secure.

Policy Updates

We may update this Policy from time to time. The latest version will be posted on this page with a new effective date. Material changes will be communicated via website notice or other reasonable means.

Contact

For privacy requests or questions, contact support@imagetoprompt.run.