Privacy Policy

Privacy policy for Gpt Image - AI-powered image generation and creative platform using GPT Image 2
Apr 24, 2026

Introduction

Welcome to Gpt Image ("we," "us," or "our"), an AI-powered creative platform available at https://gptimage.page. Gpt Image enables users to generate and edit images, videos, and music using advanced AI models, including OpenAI's GPT Image 2, and provides an AI chatbot assistant.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully. By using Gpt Image, you consent to the data practices described in this policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

Information We Collect

1. Account Information

When you create an account, we collect:

  • Name
  • Email address
  • Profile image (if provided)
  • Email verification status
  • IP address at the time of registration
  • Language/locale preference
  • Referral source (UTM parameters)

2. Authentication Data

To secure your account and enable sign-in, we collect:

  • Session tokens and expiration data
  • OAuth tokens if you sign in via Google or GitHub
  • User agent (browser and device information) per session

3. AI Usage Data

When you use our AI generation features, we log:

  • Type of media generated (image, video, music)
  • AI provider and model used
  • Your input prompts and generation options
  • Generated output references
  • Task status and timestamps
  • Credits consumed per generation

4. Chat Data

When you use our AI chatbot, we store:

  • Full conversation history (your messages and AI responses)
  • Model and provider used for each conversation
  • Conversation metadata and timestamps

5. Payment and Billing Information

When you make a purchase, we collect:

  • Order details (amount, currency, payment status)
  • Payment provider used (Stripe, PayPal, or Creem)
  • Subscription details (plan type, billing interval, renewal dates)
  • Invoice references
  • Discount codes applied

Note: We do not directly store your full credit card number. Payment processing is handled by our third-party payment processors.

6. API Key Data

If you generate API keys for programmatic access, we store:

  • API key identifiers
  • Associated permissions and usage records

7. Credit and Usage Records

We track your credit balance, including:

  • Credit purchases and allocations
  • Credit consumption per AI task
  • Credit expiration dates

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our AI generation services
  • Process your transactions and manage your account
  • Deliver the AI-generated content you request
  • Track credit usage and enforce usage limits
  • Send transactional emails (account verification, receipts, service updates)
  • Analyze usage patterns to improve our services
  • Detect and prevent fraud, abuse, or unauthorized access
  • Comply with legal obligations

We use cookies and similar tracking technologies to collect information about your browsing activity. Below are the categories of cookies we use:

Essential Cookies

Required for the website to function. These include authentication session cookies and locale preference cookies. You cannot opt out of essential cookies.

Analytics Cookies

We use the following analytics services to understand how users interact with our platform:

  • Google Analytics
  • Microsoft Clarity
  • Plausible Analytics
  • OpenPanel
  • Vercel Analytics

These services may collect data such as pages visited, time spent on pages, click patterns, and device information.

Advertising Cookies

We use Google AdSense, which may place cookies on your device to serve personalized advertisements based on your browsing history.

Functional Cookies

These cookies remember your preferences (such as language settings and theme) to provide a personalized experience.

Third-Party Cookies

Our payment processors (Stripe, PayPal) and customer support tools (Tawk.to, Crisp) may set their own cookies when you interact with their services on our platform.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. Note that disabling certain cookies may affect the functionality of our services.

Third-Party Services

We share data with the following categories of third-party service providers to operate our platform:

AI Processing Providers

Your prompts and input media are sent to third-party AI providers for processing:

  • Replicate (including OpenAI GPT Image 2 models)
  • Fal.ai
  • Google Gemini
  • Kie.ai
  • OpenRouter

These providers process your content according to their own privacy policies and terms of service.

Payment Processors

  • Stripe
  • PayPal
  • Creem

These processors handle your payment information directly and are PCI-DSS compliant.

Analytics and Advertising

  • Google Analytics and Google AdSense (Google LLC)
  • Microsoft Clarity (Microsoft Corporation)
  • Plausible Analytics
  • OpenPanel
  • Vercel Analytics (Vercel Inc.)

Cloud Storage

  • Cloudflare R2 (Cloudflare, Inc.)
  • Amazon S3 (Amazon Web Services, Inc.)

User-uploaded media and AI-generated content may be stored on these services.

Email Services

  • Resend — used for transactional emails (account verification, receipts, notifications)

Customer Support

  • Tawk.to
  • Crisp

Database and Infrastructure

  • Turso (LibSQL) — database hosting
  • Vercel — application hosting

Authentication

  • Google OAuth and GitHub OAuth — if you choose to sign in with these providers, we receive basic profile information (name, email, profile image) from them.

Data Storage and Security

Your data is stored on secure servers provided by Turso and Vercel, with infrastructure primarily located in the United States. We implement industry-standard security measures including:

  • Encryption of data in transit (TLS/SSL)
  • Access controls and authentication for internal systems
  • Regular security reviews

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

International Data Transfers

If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

Your Rights Under GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access — You can request a copy of the personal data we hold about you.
  • Right to Rectification — You can request that we correct inaccurate or incomplete personal data.
  • Right to Erasure — You can request that we delete your personal data, subject to certain legal exceptions.
  • Right to Restrict Processing — You can request that we limit how we use your data.
  • Right to Data Portability — You can request your data in a structured, commonly used, machine-readable format.
  • Right to Object — You can object to our processing of your personal data for certain purposes.
  • Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@gptimage.page. We will respond to your request within 30 days.

Legal Basis for Processing: We process your personal data based on: (a) your consent, (b) the necessity to perform our contract with you, (c) our legitimate interests in operating and improving our services, and (d) compliance with legal obligations.

Your Rights Under CCPA/CPRA (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know — You can request information about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete — You can request that we delete your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale — We do not sell your personal information. If this changes, we will provide an opt-out mechanism.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.
  • Right to Correct — You can request correction of inaccurate personal information.

To exercise these rights, contact us at support@gptimage.page.

AI-Specific Data Practices

Prompt and Content Storage

When you use our AI generation features, your input prompts, generation parameters, and references to generated outputs are stored in our database. This data is used to:

  • Deliver the generated content to you
  • Maintain your generation history
  • Track credit consumption
  • Improve service reliability

Third-Party AI Processing

Your prompts and uploaded media are transmitted to third-party AI providers (listed above) for processing. Each provider has its own data handling practices. We recommend reviewing their privacy policies.

No Training on User Data

We do not use your prompts, uploaded media, or generated content to train or fine-tune AI models. Your creative content remains yours.

Content Moderation

We may review generated content and prompts to enforce our content policies, prevent abuse, and comply with legal requirements.

Children's Privacy

Gpt Image is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it. If you believe a child under 13 has provided us with personal data, please contact us at support@gptimage.page.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

  • Account data: Retained until you delete your account
  • AI generation history: Retained for the duration of your account
  • Payment records: Retained as required by applicable tax and financial regulations
  • Session data: Automatically expired based on session timeout settings
  • Credit records: Retained until credits expire or your account is deleted

After account deletion, we may retain certain data as required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Gpt Image Dev Website: https://gptimage.page Email: support@gptimage.page

For GDPR-related inquiries, you may also contact your local data protection authority.


This Privacy Policy is effective as of April 24, 2026. By using Gpt Image, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.