Privacy Policy

Last updated: October 13, 2026

1. What This Policy Covers

This policy explains what information img2img (the "Service", at img2img.run) collects, how it is used and shared, and the choices you have. By using the Service you agree to this policy.

2. Your Photos, in Short

• Uploaded images are used only to generate your images and to run automated safety checks on them. They are sent to our AI providers for those purposes and nothing else.
• We do not use your uploads to train our own models, and we do not sell them.
• Only upload photos of yourself or of people who have given you permission — never of a minor without a parent or guardian's consent.
• You can ask us to delete your uploads and generated images at any time by emailing [email protected].

3. Information We Collect

• Account information. When you sign in with Google, the name, email address, and profile photo Google shares with us. We do not receive your Google password.
• Content you provide and create. The one or two images you upload and the image generated from them. Your prompt is sent to the AI provider to generate the image; we keep only its length, not its text.
• Technical data. Server logs (IP address, timestamps, request metadata) and device and browser information. We store a one-way hash of your IP address to count generations against the daily limit. The Service sets a cookie that keeps you signed in and a short-lived cookie used during Google sign-in, and runs a human-verification check in your browser before each generation.
• Analytics. We use Google Analytics and Microsoft Clarity to understand how pages are used, such as visits, clicks, and scrolling. Both set their own cookies.

4. How We Use Information

• To operate the Service: your uploads and prompt are sent to third-party AI providers solely to generate the images you request.
• To keep the Service safe: requests and results go through automated safety checks, and we use them to enforce the content rules in our Terms, including the ban on NSFW content.
• To store and serve your uploads and generated images from cloud storage.
• To maintain security: enforcing the daily limit per network, preventing abuse, and debugging failed generations.
• To improve the Service: measuring how pages and the generator are used.

We do not sell your personal information.

5. How Information Is Shared

Only with parties needed to run the Service:

• AI providers, which receive the uploads and prompt for an image you request;
• Infrastructure providers for hosting, storage, our database, and human verification;
• Google sign-in and analytics providers (Google Analytics, Microsoft Clarity) as described above;
• Authorities, where required by law or to protect the Service, its users, or people depicted in content.

6. Retention and Deletion

• Your uploads and generated images are kept until you ask us to delete them or delete your account. A generated image is served from an unlisted link, so anyone you share that link with can open it.
• To delete uploads, generated images, or your whole account, email [email protected] from the address you sign in with, and we will do so within a reasonable period, except records we must keep by law.
• Generation records (time, status, and the hashed IP address) are retained for abuse prevention. Sign-in sessions expire after 30 days, or when you sign out.

7. Security

Data is encrypted in transit (HTTPS). Access to production systems and stored files is restricted. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security — please keep your Google account protected.

8. Your Choices and Rights

• Download each generated image from the generator after it is created; the Service does not keep an image history in your account.
• Depending on where you live, you may have rights to access, correct, export, or erase your personal data — exercise them by emailing [email protected].
• If someone uploaded your photo without permission, contact us and we will remove it.
• You can limit analytics cookies through your browser settings or extensions.

9. Children

The Service is not directed at children under 13 (or the higher minimum age where you live). We do not knowingly collect their data; if you believe a child has provided data or a minor's photo was uploaded without guardian consent, contact us and we will delete it.

10. International Processing

We and our providers may process data in various countries. Where we transfer data internationally, we rely on the safeguards those providers offer.

11. Changes and Contact

We may update this policy; the date above (October 13, 2026) reflects the latest revision, and material changes will be announced in the product. Questions or requests: email [email protected].