Privacy Policy

This policy explains what personal data Your Legal Name (an individual based in Hong Kong), the operator of EditImageText.net (“we”), collects, why, who it is shared with and what rights you have. We are responsible for (the “controller” of) this data.

1. What we collect

• Account data from Google sign-in: your Google account ID, email address, name and profile picture.
• Purchase records: which pack you bought, the amount, currency, date and Stripe's payment reference, plus your credit balance and history. Card numbers and other payment details are entered on Stripe's checkout page and never reach our servers.
• Edit records: for each edit, the mode, quality setting, credits charged, status, duration and error codes. These do not include your images.
• Messages you send us by email or the contact form.
• Technical data: IP address and request logs, used for security, rate limiting and fixing errors.

2. Your images

Cropping and blending happen in your browser. For each edit, only the part of the image needed is sent through our server to the AI model provider (Google Gemini API, paid tier) and the result is returned to you. We do not store your images or results. Under the provider's paid-service terms, this content is not used to train or improve its models.

3. Why we use your data

• To provide the Service and your account (performing our contract with you).
• To take payments, deliver credits, handle refunds and keep financial records (contract and legal obligation).
• To prevent fraud and abuse, including card testing and misuse of the editor (our legitimate interest in keeping the Service safe).
• To answer your messages and requests (contract and legitimate interest).

We don't sell your personal data, don't use it for advertising and don't use your images for anything other than performing the edit you asked for.

4. Who we share it with

Only with service providers that process data on our behalf:

• Stripe — payment processing and fraud prevention. Stripe collects your payment details directly; see Stripe's Privacy Policy.
• Google — sign-in (Google Identity Services) and the AI image models (Gemini API).
• Cloudflare — hosting, database and network security.

We may also disclose data where the law requires it, or to protect the rights and safety of users and others.

5. International transfers

Our providers process data in several countries, including the United States. Where required, transfers are protected by the providers' contractual safeguards (such as standard contractual clauses).

6. How long we keep it

• Account data and credit history: while your account is open, and deleted within 30 days after you ask us to close it.
• Purchase and refund records: for as long as tax and accounting law requires (up to 7 years).
• Request logs: up to 30 days. Messages to us: up to 2 years.

7. Cookies

We set one strictly necessary, HttpOnly session cookie to keep you signed in. We don't use advertising or analytics cookies. Google sign-in and Stripe checkout may set their own cookies when you use them.

8. Your rights

Depending on where you live (for example under Hong Kong's Personal Data (Privacy) Ordinance, the EU/UK GDPR or California law), you can ask to access, correct, delete or export your personal data, and object to or restrict certain processing. Email support@editimagetext.net; we reply within 2 business days and complete requests within 30 days. You can also complain to your local data-protection authority.

9. Google user data

We only request your basic Google profile (ID, email, name, picture) to create and secure your account. Its use complies with the Google API Services User Data Policy, including the Limited Use requirements. It is not shared with third parties except the providers listed above.

10. Children

The Service is not intended for anyone under 18, and we don't knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

11. Security

All traffic uses HTTPS. Sessions are signed and HttpOnly. Payments are handled by Stripe, a PCI DSS Level 1 certified provider, so card details never pass through our systems.

12. Changes and contact

We'll post any changes here and update the date above. Questions: support@editimagetext.net or the contact page.