Privacy Policy
Last updated: August 26, 2026
What we collect
Two things. Account data: the email address, and the name and profile picture if you sign in with Google. Usage data: which tool you ran, when, how many credits it cost, and the IP address and country of the request. If you buy something we also keep the billing records needed to reconcile the payment.
Images and video you upload
What you attach is read, not kept. The file is held in memory for the length of one request, passed to the model that does the work, and then dropped — it is never written to our storage, never turned into a thumbnail, and never used to train any model, ours or anyone else's. The only things we retain about an upload are its type, dimensions, duration and size, plus a one-way fingerprint (a SHA-256 hash) that lets us reuse a previous result when you submit the same file twice. A hash cannot be turned back into your picture.
Who processes your images
Running a tool means sending your image to the company that operates the model. We use Cloudflare for hosting and storage, fal.ai and OpenRouter as model gateways, and behind them the model providers themselves — currently Google, OpenAI and Anthropic. Processing takes place primarily in the United States. If we add a model that processes data in another jurisdiction, we will name it here before we route any traffic to it.
How long we keep things
Uploaded originals: never stored in the first place (see above). Generated results: 30 days if you are signed in, 7 days if you are not — you can delete them sooner from your history at any time, and you can download anything you want to keep for longer. Usage and billing records: kept while your account exists and afterwards for the period tax and accounting rules require.
Anonymous use
Tools priced at 10 credits or less may offer one real anonymous run per UTC day. To enforce that limit, the server combines the current date, IP address and browser user-agent with a private salt and stores only the resulting one-way daily hash. We do not store the raw IP address, browser fingerprint, prompt or uploaded image in the quota record. Failed runs do not consume the allowance, and the daily identifier cannot be linked across dates.
Payment data
Card details are handled entirely by our payment providers (Stripe, Creem and PayPal). We never see or store card numbers — only the identifiers needed to match a payment to your account.
Cookies
A strictly necessary HttpOnly session cookie to keep you signed in, a language preference cookie, and the anonymous-allowance identifier described above. No advertising cookies, no third-party trackers.
Content checks
Uploads and generated results are automatically checked against the restrictions in our terms. When something is blocked we record that it happened, the reason, and the requesting IP address — but we do not keep the image itself.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing us. Deleting your account removes your stored results and account data; billing records are retained where the law requires it.
Contact
Questions about this document? Email support@theaiimageagent.com.