Privacy Policy

Sign-in is through Google. When you sign in, we receive your name, email address and profile picture.

When you generate an image, we collect:

- Prompts and settings: the text you enter, the model and the options you choose.

- Reference images: any image you add to a request.

- Generated images: the output of your requests, along with their status and the credits they used.

- Moderation records: the result of each content check, the first 120 characters of the prompt that was checked, and the address of any image that was checked.

- Usage data: pages visited, features used, and credit and generation history.

- Device data: browser type, operating system, screen resolution and IP address.

- Payment data: Waffo processes payments. We receive order and subscription details such as the plan, amount and status. Your card details are not stored on our servers.

We use your information to:

- Run your account and track your credits.

- Send your prompts and reference images to the image model and return the results.

- Check prompts and reference images against our content rules, which prohibit pornography and adult content, sexual content involving minors, face swaps and deepfakes, and using a real person's likeness without consent. We may use moderation records to enforce these rules and, where the law requires it or for sexual content involving minors, share them with the authorities.

- Answer support requests and send important notices about the service.

- Understand how the Platform is used, through aggregated analytics.

- Detect and prevent fraud, abuse and security incidents.

We do not sell your personal information, and we do not use your prompts or images to train AI models.

We keep your account information, prompts, reference images and generated images for as long as your account is active or as needed to provide the service.

The Platform has no delete button yet. To delete images or your account, email support@image-2-6.net from the address on your account. We will remove your personal data within 30 days, except where we must keep it by law or for legitimate business purposes such as fraud prevention and payment records.

Generated images and reference images are served from a direct file link. Anyone who has that link can open the file until it is deleted, so share links with care and do not submit images you need to keep private.

We rely on these providers, each of which processes data under its own privacy policy:

- Google: sign-in, and Google Analytics where it is enabled.

- Third-party AI model infrastructure providers: run GPT Image 2.6. Your prompts, settings and reference images are sent to them for processing. The model is developed by OpenAI, so this data may also reach OpenAI as part of generating your image.

- Cloudflare: hosting, database and image storage, and the AI models that perform our content checks.

- Waffo: payment processing, once checkout is open.

- Plausible: privacy-focused website analytics.

We share only the data each service needs in order to work.

We use encrypted transmission (TLS), secure authentication (OAuth 2.0, JWT) and access controls to protect your information.

No system is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable laws.

We use cookies and similar technologies to keep you signed in, remember your preferences and analyze site usage. Specifically:

- Essential cookies: required for sign-in and core functionality.

- Analytics cookies: help us understand how features are used, in aggregate.

You can manage cookies through your browser settings. Disabling essential cookies may stop some features from working.

Depending on your location, you may have the right to:

- Access the personal data we hold about you.

- Request correction of inaccurate data.

- Request deletion of your data ("right to be forgotten").

- Object to or restrict certain processing activities.

- Request data portability.

To exercise any of these rights, contact us at support@image-2-6.net. We will respond within 30 days or as required by applicable law.

Image 2.6 is operated from the country in which the operator of the Platform is established. Our providers, including AI model infrastructure providers and Cloudflare, may process your information in the United States and other countries, where data protection laws may differ from those in your jurisdiction.

By using the Platform, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

Image 2.6 is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us and we will promptly remove it.

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. We will post the updated policy on this page and revise the "Last updated" date.

For material changes, we may notify you by email or with a prominent notice on the Platform.

This section applies if you are in the European Union, European Economic Area or United Kingdom, and supplements the rest of this policy under the General Data Protection Regulation (GDPR).

Data controller: the controller of your personal data is Image 2.6. You can contact us about any data matter at support@image-2-6.net.

Legal bases for processing (GDPR Article 6): we process your personal data on one or more of the following bases:

- Performance of a contract: to create and operate your account, deliver the service and process your payments.

- Consent: where you give it, for example for certain cookies or optional communications. You may withdraw consent at any time.

- Legitimate interests: to secure the Platform, enforce our content rules, prevent abuse and improve our service, balanced against your rights and freedoms.

- Legal obligation: to comply with tax, accounting and other legal requirements.

Your rights: in addition to the rights listed in Section 7, you have the right to object to processing carried out on the basis of legitimate interests.

Right to lodge a complaint: you have the right to lodge a complaint with your local data protection supervisory authority.

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at support@image-2-6.net.