Privacy Policy

Effective Date: January 1, 2025

Introduction

ImageTools ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect when you use imagetools.app, why we collect it, and how we handle it. By using ImageTools you agree to the practices described in this policy.

Information We Collect

We collect the minimum information necessary to provide and improve the service:

Account information — your name and email address when you create an account.
OAuth profile data — if you sign in with Google, we receive your name, email address, and profile picture from Google.
Usage analytics — which tools you use and the file size (in bytes) of processed images. We never see or store the image content itself.
Payment information — handled entirely by Lemon Squeezy, our payment processor. We never receive or store card numbers, billing addresses, or bank details.
Device fingerprint — an anonymous identifier generated in your browser for free-tier rate limiting. It contains no personally identifiable information.

Information We Do NOT Collect

We never store uploaded image files. All files are processed in memory and deleted from our servers within 1 hour of processing.
We never sell your data to third parties, advertisers, or data brokers.
We do not use your images to train AI models. Your content is yours alone.

How We Use Your Information

To provide, operate, and improve the ImageTools service.
To send transactional emails such as password reset links and billing receipts (these are always related to your account activity, not marketing).
To enforce fair-use limits — for example, tracking how many AI tool operations a free user has performed in the current 30-day window.
To send optional marketing updates about new tools or features — only if you explicitly opt in.

Cookies & Tracking

We use session cookies set by Supabase to maintain your login state. These are strictly necessary for authentication and are not used for tracking across third-party sites. We do not use third-party advertising cookies. If Google Analytics is enabled, it is configured in anonymized mode and does not collect personal identifiers.

Data Retention

Account data — retained until you delete your account. After deletion, data is permanently purged within 30 days.
Processed job logs — retained for 90 days for service analytics, then permanently deleted. Logs record only tool name and file sizes, never file content.
Uploaded files — deleted within 1 hour of processing. There are no archives or backups of user-uploaded images.

Your Rights

You have the right to access, correct, or delete your personal data at any time. Logged-in users can manage their data from the account dashboard. To request a full data export or submit a deletion request, contact us at privacy@imagetools.app. We respond to all requests within 30 days. If you are in the European Economic Area, you have rights under the GDPR. If you are in California, you have rights under the CCPA. Both grant you the right to access, delete, and opt out of the sale of your data (we do not sell data).

Third-Party Services

We use Supabase for authentication and database hosting, Lemon Squeezy for payment processing, and Upstash Redis for rate limiting. Each provider has their own privacy policy. We share only the minimum data required for each service to function.

Contact

For privacy-related questions or data requests, contact us at privacy@imagetools.app.