Privacy Policy for img-2-img.com

Last Updated: September 4, 2026

This Privacy Policy explains how img-2-img.com ("img-2-img.com," "we," "us," or "our") collects, uses, discloses, and retains information when you visit our website, create an account, purchase credits or a subscription, upload content, or use our AI-powered image generation and editing services (the "Service").

Who This Policy Applies To

The Service is intended only for people who are at least 18 years old. We do not knowingly offer the Service to, or collect personal information from, anyone under 18. If you believe a person under 18 has provided personal information to us, contact us at [email protected].

Information We Collect

Account and Contact Information

When you create an account, sign in, or contact us, we may collect your name, email address, profile image, account identifier, sign-in provider details, and the contents of your communications with us. If you use a supported third-party sign-in option, such as Google or GitHub, we receive the account information that provider makes available based on your settings and authorization.

Payment, Subscription, and Credit Information

When you purchase credits or a subscription, we collect or receive order identifiers, the product or plan selected, price and currency, payment and subscription status, credit balance and usage records, renewal or cancellation information, billing country or similar billing metadata made available to us, and records needed for accounting, support, fraud prevention, and disputes.

Stripe processes payment card information on our behalf. We generally do not receive or store your full card number, card security code, or complete payment credentials.

Content and AI Task Information

When you use an image tool, we process the content and instructions required to perform your request, which may include:

uploaded source images, masks, reference images, and related files;
text prompts and other instructions;
generation settings, selected model or feature, file type, output format, aspect ratio, and requested output count;
generated images and other results; and
task identifiers, provider identifiers, timestamps, status, error information, and other operational records.

Please do not upload content that you are not authorized to use or content containing personal or sensitive information that is not necessary for your request.

Image Safety Screening

To enforce our rules and reduce the risk of prohibited content, we use automated safety screening on uploaded input images before sending an accepted task for generation and on generated output images before making an accepted result available. The screening may create or process safety classifications, confidence scores, block reasons, and related task metadata.

Our current image-specific NSFW screening does not automatically review the meaning of text prompts. Text prompts may still be processed as part of the requested AI task and may be examined when reasonably necessary to investigate abuse, enforce our Terms of Service, protect users or providers, or comply with law.

If an image cannot be screened, the screening service is unavailable, or the result is inconclusive, we may reject or stop the task rather than allow it to proceed. Automated systems can make mistakes. If you believe lawful content was blocked incorrectly, contact [email protected] and include the relevant task or order information. Do not email sensitive source images unless our support team specifically asks for them through an appropriate channel.

Device, Usage, Log, and Security Information

When you access the Service, we may automatically collect technical and usage information, including:

IP address and approximate region derived from it;
browser type, operating system, device information, language, and time zone;
referring page, pages visited, clicks, session activity, and timestamps;
authentication, payment, generation, credit, and subscription events; and
diagnostic logs, performance data, errors, and security or anti-abuse signals.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies where needed to authenticate users, maintain sessions, remember preferences, support localization, secure the Service, and prevent abuse. Depending on the features enabled in a particular deployment, we may also use measurement or advertising tools such as Vercel Analytics, Google Analytics, Google Ads, OpenPanel, or Plausible to understand traffic, measure product performance, attribute conversions, and support advertising. A tool listed here does not necessarily operate on every visit or in every deployment.

You can control many cookies through your browser settings. Disabling essential cookies may prevent account or Service features from working.

How and Why We Use Information

We use information to:

provide, operate, maintain, and improve the Service;
authenticate users and administer accounts;
process AI requests and deliver results;
administer orders, subscriptions, credits, cancellations, and support requests;
screen images, enforce our Terms of Service, and prevent fraud, payment abuse, security incidents, and other misuse;
diagnose errors, monitor reliability, and understand how the Service is used;
communicate service, transaction, policy, and security information;
establish, exercise, or defend legal claims; and
comply with applicable legal, tax, accounting, and regulatory obligations.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as security and Service improvement, comply with legal obligations, or act with your consent. You may withdraw consent where consent is the applicable basis, without affecting processing completed before withdrawal.

AI, Infrastructure, and Other Service Providers

We disclose information to service providers only as reasonably necessary for them to perform services for us or as otherwise described in this Policy. Depending on the feature and deployment, these providers may include:

Stripe, for checkout, payment processing, subscriptions, fraud prevention, and billing records;
Google and GitHub, when their authentication options are enabled and you choose to use one;
Replicate, for AI inference, image generation or processing, and automated image safety screening;
Fal, for AI inference, image generation, or image processing, depending on the tool selected;
Cloudflare R2 and related Cloudflare services, for object storage and delivery of uploaded or generated media;
Vercel, for application hosting, network delivery, logs, performance monitoring, and analytics when enabled; and
analytics and advertising providers such as Google Analytics, Google Ads, OpenPanel, or Plausible, only when the relevant service is configured and enabled.

These providers process data under their own service terms and privacy practices. Uploaded content, prompts, settings, and generated results may be transmitted to an AI or infrastructure provider when necessary to perform your request, screen images, store files, or deliver results.

Media URLs and Storage

Uploaded and generated media may be stored and delivered through public or unlisted object URLs. "Unlisted" does not mean private: anyone who obtains or receives a working URL may be able to access the media while the URL remains active. Do not treat a media URL as a secure vault, and do not share it with people who should not have access.

We do not currently promise that uploaded or generated media will be deleted automatically within 24 hours or any other fixed period. Storage duration varies based on the workflow, provider behavior, operational needs, safety and fraud investigations, support needs, legal requirements, and technical constraints. Third-party AI and infrastructure providers may retain data according to their own applicable terms and retention practices.

You may request deletion as described below. We will take reasonable steps in systems we control, subject to verification and applicable technical, contractual, security, and legal limitations. Removing an account record does not necessarily invalidate a previously shared media URL immediately or erase copies already processed by a third-party provider, backup, security record, or legally required archive.

When We Disclose Information

In addition to the providers described above, we may disclose information:

when you direct us to do so or consent to the disclosure;
to professional advisers and contractors subject to appropriate obligations;
to comply with applicable law, legal process, or a lawful government request;
when reasonably necessary to protect users, the public, our rights, payment networks, providers, or the security and integrity of the Service;
to investigate prohibited content, fraud, infringement, disputes, or violations of our Terms of Service; or
in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law.

We do not sell personal information for money. We also do not operate a data-broker business based on uploaded images or prompts. Some privacy laws define "sale" or "sharing" more broadly than an exchange for money; if such a law applies to you, you may contact us about the rights available in your jurisdiction.

Data Retention

We retain different categories of information for different periods. We keep information for as long as reasonably necessary to provide and secure the Service, maintain account and order history, administer subscriptions and credits, investigate abuse or fraud, resolve support requests and disputes, enforce agreements, and meet tax, accounting, payment-network, and other legal obligations. We do not represent that all information follows one fixed retention period.

When information is no longer reasonably necessary for these purposes, we may delete, de-identify, or aggregate it. De-identified or aggregated information that cannot reasonably identify you may be retained and used for lawful purposes.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These safeguards may include encrypted transmission, access controls, logging, and security measures provided by our hosting, storage, authentication, payment, and AI service providers.

No method of transmission or storage is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur. You are responsible for protecting your login credentials and promptly notifying us if you suspect unauthorized access to your account.

International Data Processing

img-2-img.com and its providers may process and store information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use or rely on legally recognized safeguards for applicable international transfers.

Your Rights and Choices

Depending on your location and subject to applicable exceptions, you may have the right to:

request access to or a copy of personal information about you;
request correction or deletion;
object to or restrict certain processing;
request portability of certain information;
withdraw consent where processing is based on consent; or
appeal or complain to an appropriate data-protection authority.

To submit a request, email [email protected] from the address associated with your account and describe the request. We may need to verify your identity and authority before acting. Authorized agents may be required to provide proof of authorization.

Deletion rights are not absolute. We may retain information when reasonably necessary to complete transactions, preserve billing and credit records, detect or investigate fraud and prohibited content, maintain security logs, exercise or defend legal claims, comply with payment-network requirements, or satisfy tax, accounting, regulatory, and other legal obligations. We may also retain information in backups until it is overwritten through normal processes.

Third-Party Sites and Services

The Service may link to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our providers, or legal requirements. We will post the revised version on this page and update the date above. Where required by law, we will provide additional notice or request consent before a material change takes effect.

Contact Us

Questions, privacy requests, image-safety review requests, or complaints may be sent to:

Website: img-2-img.com

Email: [email protected]