Privacy Policy

1. Data Controller

The data controller responsible for this service is:

Brainseed Factory e.K.
Forstweg 6
53343 Wachtberg
Germany

Contact: hello@image-edit.ai

2. Overview

image-edit.ai is designed to minimize data collection. The service can be used without creating an account.

We only process data necessary to operate the platform and provide the requested image editing service.

3. Image and Prompt Processing

When you upload an image and describe an edit, the image and your prompt are transmitted to the AI providers that perform the actual image processing, OpenAI (USA) and Google (USA), solely to generate the requested edit.

Your uploaded original is not permanently stored by us. The generated results and their watermarked previews are stored on our infrastructure so you can view and download them, and are automatically deleted after 14 days.

4. Support and Abuse Log

To be able to answer support requests, investigate abuse, and enforce our content rules, each edit request is recorded in an internal log. This log contains: the prompt, the email address associated with your credit code (if one is active), a reference to that code, your IP address, browser information (user agent), the action performed, and timestamps.

These log entries are automatically deleted after 14 days.

5. Purchases and Credit Codes

When you purchase credits, we store your email address, the issued credit code, and its credit balance so we can deliver the code, restore it in support cases, and prevent duplicate charges. Records of purchases are business records and are retained for as long as statutory commercial and tax retention duties require.

When you activate a credit code or complete a purchase during a browser session, we link that anonymous usage session to the purchase using a scrambled (hashed) reference. This helps us understand returning customers in aggregate; the usage statistics themselves never contain your email address or any other direct identifier.

6. Optional Improvement Data

You may optionally allow an edit (original image, previews, and prompt) to be stored for up to 7 days to improve the quality and reliability of the platform. This data:

• is stored without any account or identity information
• is used only for internal improvement
• is never sold or shared
• is automatically deleted after 7 days

If you do not give permission, no edit data is stored for this purpose.

7. Bot Protection (Google reCAPTCHA)

To protect the free preview generation against automated abuse, this site uses Google reCAPTCHA v3, a service of Google Ireland Limited / Google LLC (USA). reCAPTCHA runs invisibly and evaluates technical signals such as your IP address, browser and device characteristics to distinguish humans from bots. The legal basis is our legitimate interest in preventing automated abuse (Art. 6(1)(f) GDPR).

Google Privacy Policy · Google Terms of Service

8. Payments

Payments are processed by Stripe, a third-party payment provider. The email address you enter at checkout is shared with Stripe to process the payment and deliver your code. Stripe processes payment and billing information according to its own privacy policy.

We do not store credit card details.

9. Service Providers

To operate the platform, we use the following service providers:

• Render (USA): application hosting
• Hetzner Online (Germany): storage for generated images
• Supabase: database hosting
• OpenAI (USA): AI image processing and content moderation
• Google (USA): AI image processing and reCAPTCHA bot protection
• Stripe: payment processing
• dogado (Germany): email delivery

These providers process data only to the extent necessary to operate the service. We do not sell personal data.

10. International Data Transfers

Some of the providers above process data in the United States. These transfers are safeguarded by the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses (Art. 46 GDPR).

11. Technical Logs

Basic technical information such as IP address, browser type, and request logs may be processed temporarily by us and our hosting providers to ensure security and reliable operation of the platform. These logs are automatically deleted after a limited period.

12. Cookies and Local Storage

The website uses no tracking or advertising cookies. We use the browser's session storage for technical session state (such as your editing session and credit code), which is deleted when the browser session ends, and the browser's local storage for your theme preference, which persists until you clear it.

To measure how many people use image-edit.ai and whether they return, we also store a randomly generated visitor identifier in your browser local storage. It contains no personal data, is never shared with third parties, and is removed when you clear your browser site data.

13. Data Retention Summary

• Uploaded originals: not stored (processed only)
• Generated images and previews: 14 days
• Support/abuse log entries: 14 days
• Optional improvement data: 7 days
• Purchase and code records: statutory retention periods

14. Legal Bases (GDPR)

Under the General Data Protection Regulation (GDPR), processing is based on:

• Art. 6(1)(b) GDPR: processing necessary to provide the requested service (image editing, code delivery, downloads)
• Art. 6(1)(a) GDPR: consent, for the optional improvement data
• Art. 6(1)(f) GDPR: legitimate interests, for abuse prevention, the support/abuse log, and bot protection
• Art. 6(1)(c) GDPR: legal obligations, for retaining purchase records

15. Your Rights

You have the right to access your personal data, and to request rectification, erasure, restriction of processing, and data portability, as well as the right to object to processing based on legitimate interests and to withdraw any consent at any time with effect for the future.

Requests can be sent to: hello@image-edit.ai

You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Germany.

16. Updates

This Privacy Policy may be updated from time to time. Continued use of the service constitutes acceptance of the updated policy.