Privacy Policy
Last updated: September 13, 2026
What we collect
Two things. Account data: the email address, and the name and profile picture if you sign in with Google. Usage data: which tool you ran, when, how many credits it cost, and the IP address and country of the request. If you buy something we also keep the billing records needed to reconcile the payment. When an account is created we keep a one-way salted hash of the IP address it was created from. It is used only to limit how many new accounts from one source receive the free agent runs, and the address itself is not stored with the account.
Images and video you upload
What you attach is read, not kept. The file is held in memory for the length of one request, passed to the model that does the work, and then dropped — it is never written to our storage, never turned into a thumbnail, and never used to train any model, ours or anyone else's. The only things we retain about an upload are its type, dimensions, duration and size, plus a one-way fingerprint (a SHA-256 hash) that lets us reuse a previous result when you submit the same file twice. A hash cannot be turned back into your picture.
Who processes your images
Running a tool means sending your image to the company that operates the model. We use Cloudflare for hosting and storage. The models that process your images are currently ByteDance Seedream, Alibaba Qwen, OpenAI GPT Image 2.5, Black Forest Labs FLUX and open-source specialist models for tasks such as upscaling and background removal, reached through the infrastructure services that host them. The written request you type is also sent to Anthropic (Claude) to plan the steps; the planner does not receive your images. Depending on the model, processing takes place in the United States or in other regions where these providers operate, including Asia-Pacific. If we add a model that processes data in another jurisdiction, we will name it here before we route any traffic to it. When a template looks something up on the web (for example the landmarks of a travel destination), only the place or subject you entered is sent to our search provider, Exa — never your images.
How long we keep things
Uploaded originals: never stored in the first place (see above). Generated results: kept until you delete them if you are signed in, and for 7 days if you are not. Image agent chats — your messages, form answers and which results they produced, never the uploaded originals — are saved while you are signed in, until you delete the chat or your account; chats are not saved when you are signed out. You can delete a result at any time from the result itself, from My results or from your dashboard, and delete a chat with or without its images; deleting a result also takes down any public share link made from it. Usage and billing records: kept while your account exists and afterwards for the period tax and accounting rules require.
Anonymous use
Tools priced at 10 credits or less may offer one real anonymous run per UTC day. To enforce that limit, the server combines the current date, IP address and browser user-agent with a private salt and stores only the resulting one-way daily hash. We do not store the raw IP address, browser fingerprint, prompt or uploaded image in the quota record. Failed runs do not consume the allowance, and the daily identifier cannot be linked across dates.
Payment data
Card details are handled entirely by our payment providers (Stripe, Creem and PayPal). We never see or store card numbers — only the identifiers needed to match a payment to your account.
Cookies
We use a strictly necessary HttpOnly session cookie to keep you signed in, a language preference cookie, the anonymous-allowance identifier described above, and a first-party traffic-source cookie that keeps the referring website name for up to 90 days so we can understand where new accounts came from. We also use Google Analytics to understand aggregate traffic, page use and product interactions. Google Analytics may set analytics cookies and receives device, browser and interaction information under Google's privacy terms. We do not use this data to serve personalized advertising.
Content checks
Uploads and generated results are automatically checked against the restrictions in our terms. When something is blocked we record that it happened, the reason, and the requesting IP address — but we do not keep the image itself.
Product feedback
Feedback submissions are linked to your account so we can prevent abuse and follow up. The account email is never public. If you consent to publication, we may show the display name, title, message, related tool, product status and official replies after manual moderation. Private submissions remain visible only to authorized administrators. You can ask us to remove a published submission at any time.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing us. You can also delete your account yourself from Settings: that permanently removes your saved results, public share links, chats, feedback and sign-in details. Billing records are retained where the law requires it.
Contact
Questions about this document? Email support@theaiimageagent.com.