Privacy Policy

1. Information We Collect

We collect information that you provide directly, information created when you use the Service, and information received from trusted service providers that help us operate the Service.

2. How We Use Personal Information

• • To create and manage your account and sign you in.
• • To process prompts, uploaded files, and generation requests and to deliver outputs to you.
• • To provide billing, subscriptions, credits, receipts, customer support, and service communications.
• • To maintain security, detect abuse, enforce our terms, troubleshoot failures, and improve performance.
• • To comply with legal obligations, respond to lawful requests, and protect our rights, users, and systems.

3. Google Sign-In and Account Data

If you choose to sign in through Google, we receive basic profile information that Google makes available to us for authentication, such as your name, email address, profile picture, and account identifier. We use that information to authenticate you, create and maintain your account, and keep the Service secure.

We do not use Google account data for advertising, and we do not sell Google user data. We only request the data reasonably necessary to provide the sign-in experience and related account-level features.

4. AI Processing, Uploaded Images, and Generated Outputs

The Service is designed to process prompts and media inputs that you choose to submit. When you use text-to-image or image-to-image features, your prompt text, uploaded files, and related settings may be sent to our AI provider and storage providers so the requested generation can be completed and returned to you.

You are responsible for ensuring that you have the necessary rights, permissions, and lawful basis to upload any image or other content that contains personal data or belongs to another person. If you do not want your data processed by AI and storage providers as part of the Service, please do not submit that content.

5. How We Share Information

We share personal information only as reasonably necessary to operate the Service, comply with law, protect rights, or support a business transaction. Categories of recipients may include:

• • Authentication providers such as Google, solely to authenticate users and maintain accounts.
• • AI and media processing providers such as Kie, to process prompts, uploaded images, and generation requests.
• • Storage and infrastructure providers such as Cloudflare R2 and our hosting/database providers, to store and deliver files and operate the service.
• • Payment processors such as Stripe, Creem, or PayPal, to process purchases, subscriptions, refunds, and billing-related events.
• • Email delivery, support, analytics, or security vendors if we enable them, and only for service-related purposes consistent with this policy.
• • Law enforcement, regulators, courts, or other third parties when required by law or when reasonably necessary to protect rights, safety, or the service.
• • A buyer, investor, or successor entity in connection with a merger, financing, acquisition, reorganization, or sale of assets.

6. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember basic preferences, protect the Service, and support core functionality. If we enable optional analytics, support, or advertising tools, those tools may also use cookies or similar technologies and may receive technical usage data in accordance with their own policies and any disclosures we provide.

7. International Transfers

Our providers and infrastructure may operate in multiple countries. By using the Service, you understand that personal information may be processed and stored outside your home country, including in jurisdictions that may have different data protection rules than your own.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, comply with law, resolve disputes, enforce agreements, and protect the Service. In practice, this generally means:

• • Account information is typically retained while your account remains active and for a reasonable period afterward.
• • Prompts, uploaded files, and generated outputs may be retained while needed for service delivery, history features, abuse prevention, backups, and troubleshooting.
• • Billing and transaction records may be retained for longer periods when required for accounting, tax, chargeback, or legal purposes.
• • Security logs are retained for limited periods consistent with debugging, fraud prevention, and operational needs.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or disclosure. However, no method of transmission over the internet and no method of electronic storage is completely secure, so we cannot guarantee absolute security.

10. Your Rights and Choices

Depending on where you live, you may have privacy rights under applicable law. These may include the right to:

• • Access the personal data we hold about you.
• • Correct or update inaccurate account information.
• • Request deletion of your account or personal data, subject to legal and operational retention requirements.
• • Object to or request restriction of certain processing where applicable law provides that right.
• • Withdraw consent where we rely on consent.
• • Request a portable copy of certain data where applicable law provides that right.
• • Lodge a complaint with a supervisory authority or regulator if you believe your privacy rights have been violated.

To make a request, contact us at support@aigptimages2.com. We may need to verify your identity before fulfilling certain requests. Some rights may be limited by law.

11. Legal Bases for Processing (EEA/UK Users)

If the GDPR or similar laws apply, our typical legal bases for processing personal information are: (a) performance of a contract when we provide the Service you request, (b) our legitimate interests in operating, securing, improving, and supporting the Service, (c) compliance with legal obligations, and (d) consent where required by law.

12. California Privacy Notice

If you are a California resident, you may have rights under the CCPA/CPRA, including rights to know, access, delete, correct, and request information about certain data uses. We do not sell personal information for money. If we ever engage in a practice that qualifies as "sharing" under California law, we will provide any required notice and opt-out mechanism before doing so.

13. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps to review and delete the information where required.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, applicable law, or our data practices. When we do, we will update the "Effective date" above and, where legally required, provide additional notice or obtain consent.