1. Overview
Image Chat ("we," "our," or "us") operates the website imagechat.co (the "Service"), providing AI-powered image chat services. This Privacy Policy explains how we collect, use, store, and protect your personal information.
By using the Service, you agree to this Privacy Policy. If you do not agree, please stop using the Service.
2. Data We Collect
2.1 Data You Provide
| Data Type | Purpose | Retention Period |
|---|---|---|
| Email Address | Account registration, login, payment processing | Duration of account |
| Google Account Info | OAuth login (name, email, avatar) | Duration of account |
| Uploaded Images | AI analysis and conversation | Deleted within 24 hours |
| Conversation Content | AI responses to your questions | Up to 7 days |
| Payment Information | Subscription or credit purchases | Processed by Creem (not stored) |
2.2 Automatically Collected Data
| Data Type | Purpose | Retention Period |
|---|---|---|
| IP Address | Security, abuse prevention | 30 days |
| Device Information | Browser type, operating system | 30 days |
| Cookies | Session management, analytics | See Cookie Policy |
3. How We Use Your Data
- Provide the Service: Process uploaded images, answer questions, maintain conversation context
- Account Management: Create and manage your account, handle login
- Credit System: Track credit balance, credit usage history, model selection
- Payment Processing: Process subscriptions and credit purchases
- Service Improvement: Analyze usage patterns, optimize features
- Security: Prevent abuse, fraud, and other illegal activities
4. Third-Party Services
4.1 AI Services
| Provider | Purpose | Model Used | Data Transferred | Data Storage |
|---|---|---|---|---|
| OpenAI | GPT-4o image analysis and conversation | GPT-4o (multimodal) | Images, conversation text | Not stored (real-time processing) |
| Gemini AI analysis | Gemini (multimodal) | Images, conversation text | Not stored (real-time processing) |
Important: We use OpenAI's GPT-4o and Google's Gemini for AI-powered image analysis. These providers process your images and questions in real-time and do not store your data. Please refer to their privacy policies:
OpenAI Privacy Policy
Google Privacy Policy
4.2 Payment Services
| Provider | Purpose | Data Transferred |
|---|---|---|
| Creem | Subscription and credit payments | Payment info, email |
We accept payments via Creem (Credit/Debit cards, Apple Pay, Google Pay). Payment processing is securely handled by Creem. We do not store your complete payment information. Please refer to:
Creem Privacy Policy
4.3 Analytics Services
| Provider | Purpose | Cookie Required |
|---|---|---|
| Google Analytics | Website traffic analysis | Requires Cookie consent |
| Plausible | Aggregated analytics | No cookies required |
| Microsoft Clarity | Heatmaps, user behavior | Requires Cookie consent |
4.4 Authentication Services
| Provider | Purpose |
|---|---|
| Google OAuth | Account login via Google account |
4.5 Storage Services
| Provider | Purpose | Retention |
|---|---|---|
| Cloudflare R2 | Temporary image storage | Deleted after 24 hours |
5. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Secure storage with access controls
- Regular security assessments
- Limited access to personal data on a need-to-know basis
6. Your Rights
6.1 Account Deletion
You can delete your account in your account settings:
- Log in to your account
- Go to "Account Settings"
- Click "Delete Account"
- Confirm deletion
After deletion:
- Your account information will be permanently deleted after a 30-day buffer period
- Your images and conversation history will be deleted immediately
- Payment records are retained by Creem (legal requirement) but cannot be linked to your deleted account
6.2 GDPR Rights (EU/EEA Users)
If you are located in the European Union or European Economic Area, under the General Data Protection Regulation (GDPR), you have the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Right to Access | Obtain a copy of your personal data held by us | Email support@imagechat.co with "GDPR Access Request" |
| Right to Rectification | Correct inaccurate or incomplete data | Email support@imagechat.co with specific corrections |
| Right to Erasure | Request deletion of your personal data | Email support@imagechat.co or use Account Settings |
| Right to Restrict Processing | Limit how we process your data | Email support@imagechat.co with "Restrict Processing" |
| Right to Data Portability | Receive your data in machine-readable format | Email support@imagechat.co with "Data Portability" |
| Right to Withdraw Consent | Withdraw previously given consent | Via Cookie Settings or email support@imagechat.co |
| Right to Object | Object to processing based on legitimate interests | Email support@imagechat.co with "Object to Processing" |
Response Time: We will respond within 30 days. Complex requests may take up to 90 days with notification.
6.3 CCPA Rights (California Users)
If you are a California resident, under the California Consumer Privacy Act (CCPA), you have the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Right to Know | Know what personal data we collect, how it's used, and with whom it's shared | Email support@imagechat.co with "CCPA Know Request" |
| Right to Delete | Request deletion of your personal data | Email support@imagechat.co or use Account Settings |
| Right to Opt-Out of Sale | Opt-out of the sale of your personal data | We do not sell your data - no action needed |
| Right to Opt-Out of Sharing | Opt-out of sharing for cross-context behavioral advertising | Email support@imagechat.co with "Opt-Out Sharing" |
| Right to Non-Discrimination | Exercise your rights without discrimination | Guaranteed - no service limitation for exercising rights |
Categories of Data Collected (CCPA):
- Identifiers: Email address, Google account info
- Commercial information: Payment transactions (via Creem)
- Internet activity: Browser type, device info, access logs
- Content: Uploaded images (deleted within 24 hours), conversation history (up to 7 days)
7. Children's Privacy
- This Service is not intended for children under 13 years of age
- We do not knowingly collect personal information from children under 13
- If you are under 13, please do not use this Service or provide any personal information
- Parents or guardians: If you believe we have inadvertently collected information from a child under 13, please contact support@imagechat.co immediately. We will delete such information promptly.
8. Data Breach Notification
In the event of a data breach that may affect your personal data, we will:
- Notify regulatory authorities within 72 hours if required by applicable law (GDPR)
- Notify affected users promptly via email with:
- Description of the breach
- Types of data potentially affected
- Recommended protective measures
- Take immediate action to:
- Contain the breach
- Assess the scope and impact
- Implement additional security measures
- Document the incident
Your Rights After a Breach: You may request information about the breach, exercise your GDPR/CCPA rights, and contact relevant regulatory authorities.
9. Cookie Policy
For detailed information about how we use cookies, please see our Cookie Policy.
10. Updates
We may update this Privacy Policy periodically. When we do, the "Effective Date" will be updated and significant changes will be announced via banner.
11. Contact Us
For questions about this Privacy Policy or your personal data:
- Email: support@imagechat.co
- Website: https://imagechat.co/contact