DraftThis policy is pending legal review and is not final. It will be completed before checkout opens.
Information we collect
- Account details such as your email address and sign-in method.
- Images and text instructions you submit for editing.
- Usage records such as task status, timestamps and credit balance changes.
- Payment information. Card details are handled by our payment provider and are not stored by ImageText.
- Visit and usage events: pages you open, approximate region derived from your IP address (country, state or city level only — never GPS or a precise address), browser, device type, language, and the site you came from with query parameters removed.
- Messages you send through the contact form, including any attachments.
How we use information
- To deliver the edits you request and show your editing history.
- To operate credits, billing and account support.
- To detect abuse, fraud and prohibited use of the service.
- To keep the service reliable, understand aggregate usage and fix problems.
- To read and respond to the messages you send us.
- To send operations notifications to our internal team, as described below.
Images, instructions and retention
Uploaded images and generated results are stored privately and are not published by ImageText. They are accessed through short-lived links, and ImageText does not use them to train models.
Images are removed automatically once a task has had no activity for 24 hours. An hourly cleanup job deletes the source image and all generated results from storage and marks the task expired; this page will be restated if the window changes. Payment and accounting records are kept separately and contain no images.
Visit records and operations notifications
When you open pages, sign up, edit images or contact us, the service records an event with the time and limited context (for example browser and approximate region). Your full prompt and images are never copied into these events; they stay with the editing task and follow the 24-hour rule above.
Your IP address is stored in raw form for at most 7 days for security and abuse analysis, and as a keyed hash for up to 30 days. Visit and usage events are kept for 90 days and contact messages for 180 days, after which they are deleted or anonymized.
Summaries of these events may be posted to internal Feishu (Lark) group chats used by our team. These notifications contain identifiers and technical summaries only — never your images, full editing instructions, email address, raw IP address or the body of your messages. Full records are visible only to authorized administrators through an access-checked console, and each view of images or message content is itself logged.
Processors and model providers
We use service providers only for the purposes listed above:
- Cloudflare — hosting, database, private object storage, queueing and bot protection.
- Replicate — image-editing model provider. Your image and instruction are sent there solely to generate the result you requested, under its data-retention terms.
- Our email provider — sending verification and sign-in emails.
- Our payment provider — processing checkout and accounting when purchases are enabled. The provider name will be published here before purchases open.
Account deletion
You can request deletion of your account and associated images through thecontact page. When executed, we delete your profile, sessions, uploaded images, generated results and prompts, and remove them from private storage.
Payment and accounting records are retained in the minimum form required by applicable law. Their account identifier is replaced with a keyed pseudonym, and an audit record of the deletion is kept without the deleted identity.
Sharing
We share data with the processors listed above. We do not sell personal information.
Contact
Privacy questions can be sent through ourcontact page.