1. Overview
Image Text Editor returns one flattened AI-edited result for review and download. Depending on the selected mode, the result may replace selected text with new wording or remove selected text and reconstruct the selected area. In this policy, “we,” “us,” and “the service” refer to Image Text Editor.
The sample demo is available without sign-in. Google sign-in is required to upload your own image and use account features so we can protect AI processing capacity, associate usage with an account, and provide generation history. Original uploads are temporarily stored in private storage for up to 24 hours. Completed flattened results are saved for 7 days without a subscription, or 30, 60, or 90 days for results generated with an active Basic, Pro, or Studio subscription respectively, so the account owner can view and download them later.
2. Information we process
Images and editing instructions
When you use the editor, we process the image you upload, detected text, the selected original text, replacement text when provided, or the selected removal mode and instruction, together with the selected-text information needed to perform the requested edit. Your uploaded image, selected-text information, and replacement or removal instructions are sent to the processing providers needed to perform the edit. An uploaded image may contain personal information if you choose to include people, names, addresses, account details, or other identifying content.
Browser session data
The homepage temporarily stores the selected image, file name, and the minimum context needed to resume the upload in your browser's IndexedDB. Browser session storage holds a small marker showing that a pending upload exists. If you open credit options while an edit is waiting to be generated, it also temporarily holds the private upload identifier, file name, selected original text, replacement instruction, output resolution, and minimal editor context needed to resume that edit after purchase. It does not store the image bytes for purchase recovery. The pending upload handoff is cleared after it reaches the editor, the purchase-recovery draft expires after 24 hours and is cleared after successful recovery or generation, and you can remove either sooner by clearing the site's browser data.
Account and sign-in data
When you sign in with Google, we process the Google account identifier, email address, display name, profile image, email verification status, session identifier, and basic usage events such as which editor API was requested, generation status, and selected output resolution. Authentication and usage records are stored in Cloudflare D1.
Purchases and credit records
Creem processes Checkout and payment details as Merchant of Record. Creem may also receive prompt and instruction text for content moderation before prompt-based image generation. Image Text Editor stores related order and transaction identifiers, subscription and customer identifiers, plan, billing interval, paid periods and renewal or cancellation status, amount, currency, payment and refund status, timestamps, credit entitlement and usage records, and technical scan-limit records used to prevent abuse. We do not store payment card numbers.
Saved edited images
After a generation succeeds, the flattened edited result is stored in a private Cloudflare R2 bucket for the retention period assigned when the task was submitted: 7 days without a subscription, 30 days for Basic, 60 days for Pro, or 90 days for Studio. Later cancellation or plan changes do not shorten that saved result's expiration date. Private diagnostic image copies used to troubleshoot the generation are retained for up to 7 days and are deleted sooner if the saved edit is deleted. Cloudflare D1 stores related history details such as the file name, selected text, any replacement text, text-region geometry, output resolution, image dimensions, file size, creation time, and expiration time. These files are served through authenticated application routes and restricted administrator routes.
Support communications
If you contact us, we receive the name, reply address, message, attachments, and any other information you choose to send. The contact form opens a prepared Gmail draft; it does not silently submit information to an Image Text Editor contact database.
Product feedback
The site-wide feedback form stores the selected feedback type, message, optional email address or handle, and the page path where the form was submitted in Cloudflare D1. If you are signed in, the feedback may be associated with your account. We also store an irreversible hashed submitter signal derived from limited request information so we can rate-limit repeated submissions without storing a plain IP address for this purpose.
Technical information
Hosting and security providers may automatically process standard request information such as IP address, browser type, device type, requested URL, timestamps, response status, and security signals. We may store a hashed IP-derived signal for free-credit abuse prevention, without storing the plain IP address in the application database for that purpose. This information may be needed to deliver the service, prevent abuse, and diagnose failures.
Analytics and product improvement data
We use Plausible, Microsoft Clarity, and Google Analytics to understand how visitors use the website and where the product flow needs improvement. These services may process information such as pages viewed, referrer or campaign source, approximate location, device and browser information, timestamps, and interaction signals. Microsoft Clarity may also help us review heatmap-style behavior or session playback so we can diagnose usability problems.
3. How information is used
We use information to provide the requested text detection and image edit, move an upload between pages during the active browser session, authenticate users, protect AI access against misuse, generate and return the edited result, receive and review product feedback, respond to support or privacy requests, troubleshoot errors, review generated results, feedback, and orders through a restricted administrator console, and improve the reliability and usability of the workflow.
Where data protection law requires a legal basis, processing may be necessary to provide the service you request, support our legitimate interests in operating and securing the service, comply with legal obligations, or act with your consent where requested.
4. Service providers and disclosures
Your uploaded image, selected-text information, and replacement or removal instructions are sent to the processing providers needed to perform the edit. Prompt and instruction text may be sent to Creem for content moderation before prompt-based image generation. Creem acts as Merchant of Record for paid credit packs and processes Checkout, payment, tax, fraud-prevention, moderation, and refund information under its own terms and privacy practices. Hosting, network, security, and email providers may also process limited information on our behalf. These providers may maintain operational or security logs according to their own terms, policies, and our service arrangements.
Plausible, Microsoft Clarity, and Google Analytics help us measure traffic, understand acquisition sources, troubleshoot usability issues, and improve page and editor performance. They may set or read analytics identifiers according to their own technologies and privacy practices.
Authorized administrators may access account, order, usage, temporarily stored original uploads, and saved result information when reasonably needed for support, fraud review, abuse prevention, billing checks, quality review, or service debugging. We may disclose information when reasonably necessary to comply with law, respond to lawful process, protect users or the service, investigate abuse, or support a business transfer. We do not sell personal information, and the current version does not share personal information for cross-context behavioral advertising.
5. Retention
Original uploads are temporarily stored in private Cloudflare R2 storage for up to 24 hours and are not intentionally retained as a permanent server-side upload library. Completed flattened results expire after 7, 30, 60, or 90 days according to the membership active when the task was submitted. Related private diagnostic copies are retained for up to 7 days. You can delete a saved result from Generation history earlier or request account-data deletion. Provider security logs or temporary processing records may be retained for periods determined by those providers.
Account, session, and usage records are retained for as long as reasonably needed to operate, secure, troubleshoot, and improve the service, unless deletion is required or appropriate.
Product feedback records, including optional contact details and the hashed rate-limit signal, are retained for up to 12 months unless earlier deletion is required or requested.
Support emails are retained in the support mailbox for as long as reasonably needed to answer the request, maintain an appropriate record, resolve disputes, prevent abuse, or meet legal obligations. Retention may vary where law requires a longer or shorter period.
7. Your privacy choices and rights
Depending on where you live, you may have rights to request access to personal information, correction, deletion, restriction, portability, or information about how data is used and disclosed. You may also have the right to object to or withdraw consent for certain processing and to receive equal service when exercising a privacy right.
You can use the Cookie settings link in the footer to change your analytics choice. You can also use browser settings, privacy extensions, or device controls to block or delete cookies and similar analytics identifiers. Some browsers also provide tracking-prevention controls that may limit Plausible, Microsoft Clarity, or Google Analytics collection.
You can delete saved edited images and their related private diagnostic copies from Generation history at any time. Send other requests, including feedback deletion requests, to support@imagetexteditor.dev with the subject “Privacy request.” Describe the request and the email address associated with your Google sign-in, feedback, or communication. We may need to verify the request before acting.
8. Security and international processing
We use reasonable technical and organizational measures intended to protect information during processing. No internet transmission, browser storage system, email service, or AI provider can be guaranteed completely secure. Do not upload highly sensitive images or include passwords, API keys, payment card details, government identifiers, or confidential records in support messages.
Service providers may process information in countries other than your own. Where required, transfers should be supported by appropriate contractual or legal safeguards.
9. Children
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so the situation can be reviewed.
10. Changes to this policy
We may update this policy when the service, providers, or legal requirements change. The effective date at the top of the page will be revised when a new version is posted. Material changes may also be highlighted on the website where appropriate.
11. Contact
Questions or privacy requests can be sent to support@imagetexteditor.dev or submitted through the contact page.