Privacy Policy

Scope

This Privacy Policy explains how Img2Img ("Img2Img," "we," "us," or "our") handles personal information when you visit img2img-ai.com, create an account, upload an image, generate an output, make a purchase, or contact us. It applies to the Img2Img website and related services that link to this policy.

Img2Img is not intended for children under 13 or any higher minimum age required where they live. If you believe a child has provided personal information, contact us so we can review and delete it where required.

Information We Collect

We collect information in the following categories:

1. Account and authentication information — Name, email address, profile image, verification status, language preference, account identifiers, a protected password-authentication record when you use email and password, and authentication-provider information. If you sign in through a third party such as Google or GitHub, we receive the information that provider makes available under your settings and its terms.
2. Images and generation content — Source images, prompts, selected model, aspect ratio, output count, generation settings, generated images, task status, timestamps, and technical identifiers needed to run and troubleshoot a generation.
3. Guest, device, and network information — A signed guest identifier, IP address, browser and device type, operating system, user agent, session information, requested pages, and security or rate-limit events.
4. Transaction information — Product or plan, credit amount, price, currency, payment status, transaction or subscription identifier, invoice details, and payment email. Payment processors handle card or wallet credentials; Img2Img does not store full payment-card numbers.
5. Support communications — The email address, message, attachments, account or transaction references, and other information you send when requesting support or exercising a right.
6. Analytics and diagnostics — Page views, session interactions, referral information, approximate location derived from network information, browser and device details, performance, and error events. Production pages currently use Google Analytics and Microsoft Clarity. We also use privacy-filtered operational monitoring, including Sentry, to diagnose failures without intentionally sending prompts, uploaded images, generated images, request bodies, cookies, or default user information to error reports.

Images can reveal sensitive details about people or places. Do not upload confidential information or sensitive personal information unless you have a lawful reason and the necessary permission to process it.

How We Use Information

We use information to:

• Provide accounts, guest access, image uploads, generation, downloads, credits, subscriptions, and billing.
• Authenticate users, maintain sessions, verify uploads, apply usage limits, and prevent fraud, spam, abuse, and unauthorized access.
• Send verification, password-reset, transaction, security, and service messages.
• Respond to support, billing, privacy, copyright, and legal requests.
• Monitor reliability, investigate errors, measure site usage, and improve the service.
• Enforce our Terms of Service and comply with legal, tax, accounting, and regulatory obligations.

Where applicable law requires a legal basis, we process information as needed to perform our contract with you, comply with law, protect our legitimate interests in operating and securing the service, and obtain consent where required. You may withdraw consent for future processing when consent is the applicable basis, without affecting processing already completed.

Images, Prompts, and AI Processing

Some previews or preparation steps may occur in your browser. When you submit a generation, however, the source image is uploaded to private object storage and made available through a short-lived access URL to the selected AI service provider. The provider processes the source image, prompt, and generation settings to create the requested output. Generated files are imported back into private storage for authorized download.

We do not claim ownership of your source images, prompts, or generated outputs. We do not use those materials to serve third-party advertising. AI service providers and other processors handle them under their own service terms and privacy commitments, so do not submit content you are not permitted to disclose to those providers.

Cookies and Similar Technologies

We use essential cookies or comparable storage for authentication, security, guest usage, and interface preferences. For example, a signed guest cookie helps apply the displayed free allowance and can remain on a device for up to one year unless you remove it sooner.

Google Analytics and Microsoft Clarity may use cookies or similar technologies to provide traffic and interaction analytics. You can block or delete these technologies through your browser or device controls, although blocking essential cookies may prevent sign-in, guest generation, or other features from working. Third-party practices are described in the Google Privacy Policy and Microsoft Privacy Statement.

When We Share Information

We disclose only the information reasonably needed for the following purposes:

• Hosting, database, storage, and delivery providers that operate the application and store private source and output files.
• AI service providers that process a source image, prompt, and settings to produce an output.
• Authentication, email, and security providers that support sign-in, verification messages, abuse prevention, and Cloudflare Turnstile checks.
• Payment processors that complete purchases, subscriptions, invoices, refunds, and fraud screening.
• Analytics and error-monitoring providers, including Google Analytics, Microsoft Clarity, and Sentry, that help us understand usage and reliability.
• Professional advisers, authorities, or counterparties when reasonably necessary to comply with law, protect users or the service, investigate misuse, establish or defend legal claims, or complete a merger, financing, acquisition, or sale of assets.

We do not sell personal information for money. We do not knowingly use source images, prompts, or outputs for cross-context behavioral advertising. Online activity data received by analytics providers may be treated as a sale or sharing under some privacy laws even when no money changes hands; you may use browser controls and contact us about rights available in your location.

Retention

We keep information only as long as reasonably needed for the purposes above, subject to technical cleanup, backup cycles, dispute handling, and legal obligations.

• For completed generation tasks, source image files are scheduled for deletion 24 hours after task completion.
• Generated files from free tasks are scheduled for deletion 7 days after completion.
• Generated files from credit-based tasks are scheduled for deletion 30 days after completion.
• Deletion jobs may retry after a storage failure, so removal can take longer than the scheduled point. Uploads that never become a completed task may also remain until operational cleanup or a verified deletion request is completed.
• Task records, prompts, model and settings, credit history, account records, transaction records, security logs, and support communications may be retained longer to operate the service, resolve disputes, prevent abuse, and meet accounting or legal requirements.

Download any output you want to keep before its storage period ends. To request deletion of an unused upload or other personal information, email privacy@img2img-ai.com.

International Data Transfers

Our providers and infrastructure may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, we use lawful transfer mechanisms and contractual or organizational safeguards appropriate to the service and provider.

Security

We use measures designed to protect information, including HTTPS in transit, private object storage, expiring download URLs, access controls, upload validation, signed session or guest credentials, rate limits, and filtered error monitoring. No system is completely secure. You are responsible for protecting your account credentials and for contacting support@img2img-ai.com if you suspect unauthorized access.

Your Privacy Choices and Rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or a copy of your personal information; to object to or opt out of certain processing; to withdraw consent; and to appeal or complain to a data-protection authority. We will not discriminate against you for exercising a right protected by law.

California residents may also have rights to know the categories and specific pieces of personal information collected, correct inaccurate information, delete information subject to exceptions, limit certain uses of sensitive personal information, opt out of sale or sharing, and use an authorized agent. In the preceding 12 months, the categories described in "Information We Collect" may have been disclosed to the service-provider categories described in "When We Share Information" for the business purposes listed in this policy.

To submit a request, email privacy@img2img-ai.com from the address associated with your account when possible. State your location and requested action, but do not send a password, full card number, government identifier, or unredacted sensitive image. We may ask for information needed to verify your identity or an agent's authority. We will respond within the period required by applicable law, and some requests may be limited by legal exceptions or the rights of others.

Generative image processing is automated, but Img2Img does not use it to make decisions that produce legal or similarly significant effects about you.

Changes to This Policy

We may update this Privacy Policy as the service, providers, or legal requirements change. We will post the revised date on this page and provide additional notice when required for a material change. Your continued use after an update is subject to the revised policy, to the extent permitted by law.

Contact Us

For privacy questions or requests, email privacy@img2img-ai.com. For product, account, billing, or Terms questions, email support@img2img-ai.com. You can also review the information requested on our Contact page.