This Privacy Policy explains what data ImageRift (imagerift.com) collects, how we use it, and the choices you have. We try to be straightforward: read it once and you should know exactly what happens to your photos.
The short version
- Anonymous uploads are deleted within 24 hours.
- Signed-in source images, outputs, and related metadata may be retained for history, downloads, regeneration, abuse review, and dispute evidence.
- We do not use your images to train AI models, ever.
- We collect the minimum we need to run the Service and bill you correctly.
- With consent, we use masked session replay for product debugging; images, prompts, account details, payment fields, and API keys are blocked or masked.
- You can delete your account and associated data at any time.
1. Information we collect
1.1 Account information
When you sign up, we collect your email address and (optionally) name and avatar via our authentication provider (Clerk). We never see or store your password.
1.2 Uploaded images and generation metadata
When you generate an image, we temporarily store: the image you upload, the prompt or style preset you chose, generation settings, output dimensions, and timestamp. Anonymous source uploads are automatically deleted within 24 hours. Signed-in source images, outputs, and metadata may be retained for up to 90 days, or until you delete them where deletion is available, so you can view history, regenerate, save to Gallery, download results, monitor quotas, and resolve abuse, payment, or dispute records.
1.3 Payment information
Payments are processed by Creem when Creem checkout is enabled. If PayPal or Stripe checkout is enabled later, those providers may also process payments. We never see or store your card details; the active payment provider sends us only the information needed to manage billing, such as customer ID, payment status, plan, subscription status, and transaction references.
1.4 Usage and device data
With your consent, we collect basic usage events (e.g. page views, generations started, errors), browser type, approximate location derived from IP, device type, and masked session replay. Session replay helps us understand where uploads, generations, checkout, or account flows break. We block or mask uploaded images, generated outputs, prompts, payment fields, API keys, account contact details, and admin screens from replay capture.
1.5 Cookies
We use essential cookies (authentication, session) and, with your consent, analytics cookies for product analytics and masked session replay. You can opt out of analytics in our cookie banner.
2. How we use your information
- To provide, operate, and maintain the Service
- To bill you correctly and keep your subscription active
- To enforce quotas, prevent abuse, and comply with legal obligations
- To improve the Service (aggregated, never tied to specific images)
- To send important account or service notices (you cannot opt out of these)
- To send marketing emails (you can opt out at any time)
3. Who we share information with (subprocessors)
We use the following service providers to run ImageRift:
| Provider | Purpose | Data shared |
|---|---|---|
| Clerk | Authentication | Email, name, OAuth tokens |
| Supabase | Database hosting | User and generation metadata |
| Cloudflare R2 | Image storage | Uploaded images and outputs |
| Configured AI inference providers | AI image generation and image editing | Uploaded image, prompt, style/settings, and generation metadata needed to create the output |
| Creem | Payments | Email, billing address, customer ID, payment status, subscription status, plan, transaction references |
| Vercel | Hosting | HTTP traffic, server logs |
| PostHog | Product analytics and masked session replay | Usage events, device/browser data, and masked replay data |
| Google Analytics | Website analytics | Page views, device/browser data, and referral information |
| Resend | Transactional email | Email address |
We do not sell your personal information. We share data only as necessary to provide the Service or to comply with the law.
4. Data retention
- Anonymous source images: deleted within 24 hours of upload
- Signed-in source images and generated outputs: retained for up to 90 days, or until you delete them where deletion is available
- Generation metadata and payment evidence: retained as needed for quotas, abuse prevention, support, refunds, disputes, tax, accounting, and legal obligations
- Account data: kept while your account is active; deleted within 30 days of account deletion (some financial records are retained for up to 7 years where required by law)
- Server logs: retained for 30 days
- Analytics and masked replay: retained according to our PostHog retention settings and deleted sooner when no longer needed for product debugging
5. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent (where processing is based on consent)
To exercise any of these rights, email privacy@imagerift.com. We respond within 30 days.
6. International transfers
ImageRift operates globally. Your data may be processed in countries other than yours, including the United States and the European Union. We rely on standard contractual clauses and our subprocessors' certifications where applicable.
7. Children
ImageRift is not intended for children under 13. We do not knowingly collect data from them. If you believe a child has used the Service, contact us and we will delete the account.
8. Security
We use HTTPS everywhere, encryption at rest for databases and storage, principle of least privilege for staff access, and regular security reviews. No system is perfectly secure; we commit to disclose breaches of personal data within 72 hours of confirmation.
9. Changes to this policy
Material changes will be communicated via email or in-app notice at least 14 days before they take effect.
10. Contact
Privacy questions: privacy@imagerift.com. General support: support@imagerift.com.