Privacy Policy

1. The short version

• We collect what an account and a payment need: name, email, a hashed password, credit and payment records.
• Your uploaded photo is not stored. It is sent to the image model to process your request, and that is all.
• Generated images are kept as links for about 24 hours; the record of the generation (background, ratio, date, credits) stays in your history.
• We do not sell personal data and we run no advertising trackers.
• You can ask us to export or delete your data at [CONTACT EMAIL].

2. What we collect

Account data — name, email address, a scrypt hash of your password (never the password itself), and the language/timezone your browser reports.

Photos you upload — used only to fulfil the request you made. The image is transmitted to the image model and is not written to our database.

Generated images — the result and a record of the request (background style, aspect ratio, credit cost, status, timestamp).

Credits and payments — balances, top-up and consumption records, and the reference ID returned by the payment provider. We never see or store card numbers.

Technical and security data — IP address, user agent, request timestamps and error logs, kept to keep the Service running and to detect abuse.

3. Why we process it

• To perform our contract with you: run a generation, keep your balance, show your history.
• Legitimate interests: preventing fraud and abuse, keeping the Service secure and debugging it.
• Legal obligations: retaining transaction records for tax and accounting.
• Consent, where the law requires it — for example optional analytics. You can withdraw consent at any time.

4. Who else processes your data

We use a small number of processors, each bound to use the data only for the purpose we specify:

• Cloudflare — hosting, database and file storage (global edge network). This is where your account data and generated images live.
• Volcengine (ByteDance) 视觉智能, SeedEdit model — the AI model that performs the background edit. Your uploaded photo is transmitted to this provider to produce the result. It is sent per request; we do not ask them to retain it beyond processing.
• Our payment provider — processes your payment and, where it acts as merchant of record, handles sales tax. Its own privacy policy also applies to the payment step.
• Our email provider, if configured — delivers sign-in and receipt emails.

We do not sell or rent personal data, and we do not share it for advertising.

5. How long we keep it

• Account: until you delete it, then removed within 30 days (backups roll off on the same schedule).
• Uploaded photos: not retained; discarded once the generation request completes.
• Generated images: the link is valid for roughly 24 hours. After that the record remains, the image does not.
• Payment and credit records: kept as long as tax and accounting law requires.
• Logs: up to 30 days.

6. Cookies

We use one essential cookie to keep you signed in. There are no advertising or cross-site tracking cookies. If analytics is enabled on this deployment it is self-hosted and cookieless.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. Write to [CONTACT EMAIL] and we will respond within 30 days. You may also complain to your local data protection authority.

Deleting your account removes your profile, history and remaining credit records, except where we must keep transaction data for tax purposes.

8. International transfers

The Service runs on Cloudflare's global network and sends images to the model provider described above, so your data may be processed outside your country. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.

9. Security

Traffic is encrypted in transit. Passwords are stored as salted scrypt hashes. Provider secrets entered in the admin panel are encrypted at rest with AES-256-GCM. Access to production data is limited to the operator.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as required by law.

10. Children

The Service is not intended for anyone under 18 (or the age of majority in their country). We do not knowingly collect data from children and will delete such accounts if we learn of them.

11. Changes and contact

If this policy changes materially we will update the date above and, for significant changes, tell you by email. Questions or requests: [CONTACT EMAIL].