Privacy Policy
How GPT-IMG collects, uses, and protects your personal data
2026/06/21
Introduction
This Privacy Policy explains how GPT-IMG ("we", "us", "our") collects, uses, shares, and protects your information when you use our website and AI image generation services at gpt-img.com (the "Service"). By using the Service, you agree to the practices described here.
Information We Collect
Account information. When you register, we collect your email address and name. If you sign in with Google, we receive basic profile information (such as your name, email, and avatar) from your Google account. If you register with email and password, your password is stored only as a securely hashed value.
Generation content. To provide the Service, we collect and store the content you create with it, including:
- text prompts you enter;
- reference images you upload for image-to-image generation;
- images generated for you and their generation history and metadata (such as model used, resolution, quality, credits consumed, and timestamps).
Payment information. When you purchase a subscription or credits, payments are processed by Stripe or Creem. We receive transaction and subscription records (such as plan, amount, status, and a customer reference) but do not collect or store your full payment card number.
Usage and device data. We automatically collect technical information such as your IP address, browser type, device and operating system, pages viewed, and interactions with the Service, for security, analytics, and reliability.
Cookies. We use cookies and similar technologies as described in our Cookie Policy.
How We Use Your Information
We use your information to:
- provide, operate, and maintain the Service, including generating and storing images;
- process AI generations by sending your prompts and reference images to our model providers;
- manage your account, credits, subscriptions, and payments;
- provide customer support and respond to your inquiries;
- send service-related communications (such as account, security, and transactional emails);
- monitor usage, prevent fraud and abuse, enforce our Terms of Service, and comply with legal obligations;
- analyze and improve the performance, safety, and features of the Service.
AI Processing and Model Providers
GPT-IMG generates images using third-party AI models. When you create or edit an image, your prompts and any reference images are transmitted to upstream providers — including fal.ai and APImart, which in turn route to model providers such as OpenAI and Google — solely to produce your requested Output. Your use of these models is also subject to those providers' policies. We do not sell your content, and we do not use your prompts or images to train our own models.
How We Share Your Information
We do not sell your personal information. We share it only with:
- Service providers who help us operate the Service, including Cloudflare (hosting, image storage via R2, database, and email delivery), AI providers (fal.ai, APImart, OpenAI, Google), payment processors (Stripe, Creem), email providers (Resend), and operational notification tools (Discord), each processing data only as needed to provide their service;
- Legal and safety recipients, when we believe disclosure is necessary to comply with law, enforce our Terms, or protect the rights, safety, and property of our users, the public, or us;
- Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.
Data Storage and Retention
Your data, including generated and uploaded images, is stored on Cloudflare infrastructure (R2 object storage and D1 database). We retain your account information and generation history for as long as your account is active or as needed to provide the Service. We retain certain records longer where required for legal, accounting, or security purposes. You may request deletion of your data as described below.
Data Security
We implement reasonable technical and organizational measures — including encrypted transport (HTTPS), hashed passwords, and access controls — to protect your information from unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, or to request deletion of your account and associated data, contact us at support@gpt-img.com. We will respond in accordance with applicable law.
International Data Transfers
We operate on globally distributed infrastructure, and our providers may process your information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
Children's Privacy
The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the date above. Material changes may be communicated through additional notice where appropriate.
Contact Us
If you have any questions about this Privacy Policy or your data, please email us at support@gpt-img.com or contact us.