1. Information We Collect
- Images and object-removal instructions that you submit.
- Your name, email address, avatar, sign-in channel, and platform user identifier when you sign in.
- Orders, credit balances, and credit usage. We do not receive or store complete payment-card details.
- Operational data such as IP address, request time, processing status, duration, image dimensions, file name, and error details.
2. How Images Are Processed
- Images are sent to our configured third-party AI image provider to perform the edit you request.
- Originals and generated results for successful tasks are stored in private object storage and linked to your signed-in account for refresh recovery and cross-device task history. Objects are not publicly accessible.
- This browser also caches before-and-after previews for up to 10 recent successful tasks. You can clear them through browser settings.
- We do not use your images for public galleries, advertising, or training our own models. Third-party providers also process data under their own terms.
3. How We Use Information
- To process images, authenticate users, deduct credits, display orders, and provide support.
- To prevent abuse, enforce rate limits, investigate errors, and monitor service reliability.
- To produce aggregated usage statistics that help us improve performance and user experience.
4. Service Providers
- GetToken or a configured compatible image API processes images and text instructions.
- Youidian and Auth.js provide Google, WeChat, and other sign-in flows, orders, and credits.
- Cloudflare R2 privately stores originals and results; PostgreSQL/Neon stores account mappings, tasks, order snapshots, and credit audit records.
- Vercel and Upstash Redis host the application and provide rate limits, alert windows, and short-lived operational cache. Resend delivers necessary service notifications.
5. Cookies and Local Storage
- We use secure session cookies to keep you signed in.
- Browser storage saves your language preference, local task history, in-progress recovery data, and before-and-after previews for the 10 most recent successful tasks. You can clear this data through your browser settings.
6. Retention and Security
- Successful task images and records remain securely associated with the account until you delete them from the account task list or an applicable service-retention policy requires cleanup. Temporary images for failed or abandoned tasks are normally removed after about 24 hours. Operational error logs are generally retained for up to 90 days.
- Image read and delete endpoints verify both the signed-in account and task owner before returning or deleting originals and results.
- We use private object storage, access controls, server-side secrets, HTTPS, and rate limits, but no internet transmission can be guaranteed completely secure.
7. Your Choices and Rights
- You can delete a task, its original, its result, and its task record from the account task list. You may also request access, correction, or deletion of other personal information associated with your account, and you may stop using the service.
- Submit other privacy requests through the feedback launcher in the lower-right corner of the website. We may need to verify your identity.
8. Children and Policy Changes
- The service is not directed to children below the minimum age of digital consent in their jurisdiction.
- When this policy changes, we will update the date above. Material changes may also be announced within the service.
Document record
Version history
- v1.0
Initial public version covering images, accounts, service providers, retention, and user choices.