Privacy Policy
Last updated: May 20, 2026
This Privacy Policy explains how PicFlow AI collects, uses, shares, and protects information when you use our image processing platform, accounts, subscriptions, blog, and related services.
Information We Collect
PicFlow AI collects information you provide directly, including your email address, name, account details, support messages, and blog or admin content if you have access to those features. We also collect basic technical information such as IP address, browser type, device information, pages visited, timestamps, usage events, security logs, and error logs.
Account and Authentication Data
Authentication is handled with Supabase Auth. We use account data to create and secure your account, verify your email, manage sessions, enforce usage limits, prevent abuse, and support password reset or account recovery flows.
Image and File Processing
Images and files are used only to provide the editing action you request, such as resizing, compressing, cropping, converting, preview generation, or ZIP export. Temporary files may be created for processing reliability and are designed to be deleted automatically after the process completes or after a safe timeout. We do not sell image data.
Billing and Subscription Data
Payments, invoices, payment methods, taxes, and subscription checkout are processed by Paddle. PicFlow AI stores the subscription state needed to operate your account, such as plan, billing interval, Paddle customer ID, Paddle subscription ID, renewal date, cancellation status, payment event references, and invoice records. We do not store full card numbers.
How We Use Information
We use information to provide image tools, authenticate users, maintain subscriptions, enforce free and Pro limits, improve platform reliability, prevent fraud and abuse, debug errors, provide support, publish blog content, protect admin areas, and comply with legal or payment obligations.
Cookies, Sessions, and Analytics
We use cookies or similar browser storage for authentication sessions, security, preferences, and service operation. We may use Vercel Analytics or similar privacy-conscious analytics to understand traffic and performance without selling personal information.
Third-Party Service Providers
We use trusted providers including Supabase for authentication, database, and storage; Vercel for hosting and deployment; Paddle for checkout, billing, taxes, invoices, and subscription management; and other infrastructure or monitoring tools needed to operate the service. These providers process information according to their own terms and privacy policies.
Data Retention
Account and subscription records are retained while your account is active and as needed for billing, legal, tax, security, and operational reasons. Temporary image files are intended to be removed automatically after processing or after a safe timeout. Audit logs, usage records, and security logs may be retained for a limited period to protect the service.
Security
We use technical and organizational safeguards such as secure authentication, email verification, access controls, rate limiting, input validation, upload validation, audit logging, secure headers, and Paddle webhook verification. No online service can guarantee absolute security, but we work to protect your information responsibly.
Your Choices and Rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict use of your personal information. You can manage your account and billing where available, unsubscribe from optional communications, or contact us for privacy requests.
Children's Privacy
PicFlow AI is not intended for children under 13, or under the minimum age required by local law. We do not knowingly collect personal information from children.
International Processing
PicFlow AI and its service providers may process information in countries other than your own. By using the service, you understand that information may be transferred and processed where our providers operate.
Changes to This Policy
We may update this Privacy Policy as the platform, providers, laws, or security practices change. The updated version will be posted on this page with a new last updated date.
Contact
For privacy requests or questions, use the contact form or email [email protected].