Privacy Policy
Last updated: January 2026
Transparent Data Handling
GPT Image 2 Generator is committed to protecting your privacy. This policy explains what data we collect, how we use it, and how we protect it.
TL;DR
We keep account, credit, payment, and essential generation records so the workspace can function. We do not take your private uploads or generated outputs and use them to train our own foundation model.
Analytics are used to understand how the site is used, not to inspect the substance of your prompts. Payments are handled by third parties, and we do not store full card details.
Account Data
When you create an account, we collect via Supabase Auth:
- Email address
- Account creation timestamp
- Google OAuth info (if used)
AI Image Generation
When you use the AI generation feature:
- Your prompts and required parameters are sent to the image-generation provider
- Reference images may be uploaded as part of image-to-image requests for the current task
- Generated outputs may be stored for a limited time so they can be previewed, downloaded, and reopened
Analytics
We use Google Analytics to collect anonymous usage data:
- Page views and session duration
- Device type and browser info
- Approximate location (country level)
Payment Data
Payments are securely processed by Creem:
- We do not store your full credit card info
- Subscription status and transaction records are saved
- Refund requests are handled via Creem
AI-specific privacy notes
Unlike a traditional SaaS tool, an AI image product has to process prompts, reference images, and generated outputs. The most important privacy questions are therefore how long these assets are kept, whether they are reused for training, and who can access them. We try to keep data handling narrow and limited to what is required for the service, billing, and support.
If you upload client materials, internal product assets, or unpublished brand resources, it is a good practice to confirm your own organization’s asset policy first and avoid placing unnecessary sensitive personal information directly in prompts.
Data Protection
We take the following measures to protect your data:
- All data transfers use HTTPS encryption
- Database uses Row Level Security (RLS)
- Sensitive information is not logged
- Regular security audits and updates
Your Rights
You have the right to:
- Request access to your personal data
- Request deletion of your account and data
- Opt out of analytics tracking
- Cancel subscription and get refunds (per policy)
Reach me directly for billing, account, or generation help
If you run into questions about plan choice, payment failures, sign-in recovery, resolution access, or generation errors, the fastest path is to contact me directly on WeCom.
We keep this support path especially visible on pricing and payment-related pages so you can reach a human quickly when it matters.
Contact Us
If you have any questions about this privacy policy, please contact us.