Privacy policy

The information involved depends on the features you use. Free generation does not require an account.

• Account information: your email address, account identifier and sign-in records, plus the name, profile image and provider identifier supplied when you choose Google sign-in.
• Generation content: reference images, prompt, model and output settings, task status, timestamps, errors and generated result.
• Usage and security information: browser identifiers, IP-related information, request and device metadata, quota records and diagnostic logs. Free-quota checks use an IP-derived identifier and a signed browser identifier.
• Billing information: order and subscription identifiers, amounts, currency, payment status, credit balances and movements, and Stripe payment or refund references. Card entry is handled by Stripe's checkout; our payment flow does not receive the full card number or security code.
• Support information: your email address, message contents, attachments and information you provide when asking for help.

We use information to generate and deliver images, maintain task history, authenticate users, manage credits and subscriptions, process refunds, answer support requests, prevent abuse and investigate failures.

Where applicable law requires a legal basis, processing may be necessary to provide your requested service, meet legal obligations, or pursue legitimate interests such as security and reliability. A use that legally requires consent requires the relevant consent. Withdrawal does not affect processing that was lawful before withdrawal.

Images and a prompt are necessary for generation; an email address or supported sign-in is needed for account features. A feature may be unavailable if you choose not to provide information it requires.

We use cookies and browser storage for sign-in, free-task ownership, submission recovery and language preferences. The guest cookie is valid for up to 30 days. Authentication cookies follow the applicable session settings.

Local storage may contain a recent request identifier, settings and recovery information until replaced or cleared. Session storage may remember dismissal of a language suggestion. The application does not currently include advertising-profile tracking.

You can manage storage in your browser. Clearing it can sign you out or remove access to free history associated with that browser; it does not necessarily reset IP-based limits. Hosting, sign-in and payment providers may use additional cookies under their own policies.

We disclose information needed for the requested feature to the providers listed below. They may use subprocessors or underlying model operators. Their own handling is governed by their policies and applicable service agreements.

KIE receives your images and prompt for model processing. Our application does not operate a model-training pipeline using your uploads; this does not establish a no-training or immediate-deletion commitment for third-party model providers.

Support mail uses Cloudflare email infrastructure and the support inbox; messages or notifications may also pass through email providers used for delivery. We do not sell personal information or automatically publish your images to a public gallery. Disclosures may also be necessary to meet legal requirements or address security incidents, abuse or legal claims.

• Cloudflare — Hosts the website, database, image storage and processing infrastructure. It provides email delivery and uses Turnstile to verify free generation requests.
• KIE — Receives reference images, prompts and settings to process tasks through the selected AI model and its providers.
• Google — Handles Google sign-in when selected, and may process support notifications or correspondence delivered to a Google mailbox.
• Stripe — Processes checkout, payment information, billing, subscriptions, refunds and payment-security checks.
• Sentry — Receives technical error reports and operational logs to help diagnose failures and maintain the service.

Retention depends on the information and its purpose. Access expiry and physical file removal may occur at different times because cleanup runs periodically.

Third-party service providers retain their processing records according to their own policies.

• A guest result is available for up to 10 minutes on the original page. Free results saved to an account expire one day after generation. Credit-generated results expire seven days after generation.
• Scheduled cleanup removes expired files and their associated successful task records. Account deletion and valid removal requests may result in earlier deletion.
• If moderation blocks a generated image or ends without a decision, we may archive the image when it is available. This private archive is used only for internal review and expires seven days after the moderation failure. Scheduled cleanup applies separately from task history and account deletion. Archived images are unavailable for preview or download.
• Temporary input copies in our storage are normally removed after provider submission or a confirmed failure. Interrupted cleanup is retried. Local cleanup does not delete provider-side copies.
• Daily free-quota records are periodically removed and normally retained for approximately two weeks. Sign-in links expire after 30 minutes; expired verification records are cleaned up periodically.
• Account, transaction, support and diagnostic information is kept according to its operational purpose, account or provider settings, reconciliation needs and applicable legal requirements. Payment or infrastructure providers may retain their own records after local account deletion.

Results use access-controlled interfaces. Guest results require the original browser and the page that submitted the task. Saving a result requires signing in and verifying that browser. Saved free and paid results are accessible through the associated account. Result files are kept in private storage.

Error reporting is configured to avoid default personal-information collection, but diagnostic context and messages may still contain request or task information. No online system guarantees absolute security. Contact support@imagecombinerai.online if you believe an account, sign-in link or result has been exposed.

Depending on applicable law, you may have rights to access, correct, receive a copy of, delete or restrict use of information, object to certain processing, withdraw consent, or complain to a competent data-protection authority.

Send requests to support@imagecombinerai.online. We may need information reasonably necessary to verify ownership and identify records. Requests are handled within the time limits and exceptions required by applicable law.

Use the account-deletion option where available, or contact support. Running paid tasks must finish before deletion, and subscription or payment matters may need resolution. Deletion can remove images and account history; download anything needed first. Records independently held by providers follow their own retention obligations.

The service is intended for people able to lawfully authorize the requested processing and use. A young person who needs parent or guardian authorization under applicable law must obtain it first. Contact support@imagecombinerai.online if information may have been submitted without legally required authorization so we can review the request.

Infrastructure and model providers may process information outside your country, where protection rules may differ. Locations depend on the providers and services involved. Contact us for information about arrangements and safeguards relevant to your request.

We may update this policy for changes in the service, providers or applicable requirements. The revised date is shown above. We will provide additional notice or seek consent where required.

For privacy questions, requests or concerns about uploaded content, email support@imagecombinerai.online.