Skip to main content

Privacy Policy

How ImageChanger collects, uses, and protects personal information

Overview

This Privacy Policy explains how ImageChanger collects, uses, shares, retains, and protects personal information when you use our website and AI image generation services (the "Service"). It applies to information connected with an identified or identifiable person; it does not create rights beyond those required by applicable law.

Information We Collect

We collect information you provide directly, including your name, email address, account credentials or sign-in information, support messages, prompts, uploaded reference images, generated images, and billing information made available to us by the payment provider.

We also collect technical and usage information needed to operate and secure the Service, such as device and browser information, IP address, request logs, pages and features used, timestamps, and session identifiers. For anonymous trial abuse prevention, we derive protected HMAC-based signals from an anonymous user identifier, IP address, and user agent; these signals help enforce trial limits and are not used for advertising.

If you sign in with Google, we receive the account information Google makes available for that sign-in, such as your name, email address, and account identifier, in accordance with your Google settings.

How We Use Information

We use personal information to provide the Service; create and secure accounts; process prompts, uploads, and image generation requests; deliver downloads and account history; process subscriptions and payments; respond to support requests; prevent fraud, abuse, and security incidents; apply content-safety screening when Waffo is the active payment provider; comply with legal obligations; and maintain or improve the Service.

We do not sell personal information or use it for interest-based advertising.

How Information Is Shared

We share information only as needed to run the Service, comply with law, protect rights and safety, or complete a business transaction such as a merger or acquisition. Categories of service providers may include:

  • Cloudflare for hosting, network security, Workers, D1 database, R2 file storage, and abuse protection.
  • AI model providers to process prompts and reference images and return generated outputs. The provider may vary by selected model and can include APIMart, fal.ai, Kie AI, or their upstream providers.
  • Waffo Pancake to process payments, subscriptions, tax-related checkout functions, and billing support. When Waffo is the active payment provider, Waffo also scans generation prompts for content safety before generation; its prompt scan is stateless and does not retain the prompt text according to its service documentation.
  • Creem, when selected as the payment provider, to process payments, subscriptions, tax-related checkout functions, billing support, and safety-screen AI-image prompts before generation.
  • Google when you choose Google sign-in.
  • Crisp for customer-support chat when the widget is enabled.
  • Analytics providers only when we enable the corresponding analytics integration, such as Google Analytics, Microsoft Clarity, Plausible, or Umami.

These providers process information under their own terms and privacy notices. We do not authorize them to use your information for unrelated purposes on our behalf.

Retention and Deletion

We retain account, generation, transaction, security, and support information for as long as needed to provide the Service, meet legal and accounting requirements, resolve disputes, enforce our agreements, and maintain security. Retention periods may vary by data type and legal obligation.

You may request account deletion through available account settings. Deleting an account removes or de-identifies associated account data where technically feasible and subject to legal, security, fraud-prevention, and backup-retention requirements. Please delete content you no longer need before closing your account, and contact us if you need help with a request.

Security

We use reasonable technical and organizational safeguards designed to protect information. No online system is completely secure, so we cannot guarantee absolute security. Keep your account credentials private and notify us promptly of suspected unauthorized access.

Your Rights and Choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about our processing of your personal information. You may also withdraw consent where our processing relies on consent. To make a request, contact us using the details below. We may need to verify your identity and may limit a request where permitted by law.

You can manage browser cookies and similar technologies through browser settings. See our Cookie Policy for details. You can also contact us to ask about marketing communications; we currently do not operate an advertising mailing list.

International Processing and Changes

Our providers may process information in countries other than yours. Where required, we use appropriate safeguards for international data transfers.

We may update this Privacy Policy as the Service or applicable law changes. We will post the revised policy here with an updated date. Material changes take effect when posted unless a different date is stated.

Contact

For privacy questions or requests, email support@imagechanger.net or use our contact page.