Privacy Policy

1. Images

When signed in, images you process are stored privately so you can view your history. Anonymous processing does not create an account-based history. Original images, processed images, and their history records are automatically deleted after approximately 30 days.

2. Processing Providers

Images are sent to our contracted AI processing provider solely to perform the requested image operation. Files are stored in private object storage and are returned through time-limited signed links.

3. Authentication

We support Google sign-in. We store basic profile information such as email, name, and avatar.

4. API and Connected Applications

If you create an API key, we store only a one-way hash and a short identifying prefix; the complete key cannot be recovered after creation. If you connect Claude or another MCP client, we store the OAuth client registration, granted scope, and hashed access and refresh tokens needed to maintain and revoke that connection. Connected applications receive only the access you approve and can process only images supplied for a tool call.

5. Data Minimization and Security

We use signed URLs, encrypted HTTPS connections, expiring access tokens, revocable credentials, access controls, and rate limits. We do not collect unrelated conversation content from connected AI applications. Operational logs may include timestamps, request status, credential identifiers, and error details, but should not contain API keys, OAuth tokens, or full image contents.

6. Your Controls

You can revoke API keys from the API documentation page, disconnect OAuth applications from the connected application, or permanently delete your account and associated records from the billing page. Some short-lived logs and backups may persist for a limited period for security and recovery.

7. Cookies and Advertising

We use cookies and similar technologies for essential site functions, analytics, and advertising measurement, including Google Analytics, Google Ads conversion tracking, and Meta Pixel. For acquisition measurement, we may retain campaign parameters, advertising click identifiers, the landing page, and the referring website in a first-party cookie for up to 90 days and associate that information with a completed purchase. We do not display Google AdSense ads on this website. You can manage personalized advertising in Google Ads Settings and learn how Google uses information from partner sites in Google's privacy information.

8. Contact

Questions? Contact our support team.