Privacy Policy

Effective date: April 25, 2026
Last updated: April 25, 2026

This document is a standard product template for implementation and testing. It should be reviewed by qualified legal counsel before public launch.

1. Overview

This Privacy Policy explains how GPT Image 2 ("we", "our", or "us") collects, uses, stores, and shares personal information when you use the Service.

2. Information We Collect

We may collect the following categories of information:

2.1 Account Information

• name;
• email address;
• avatar or profile image;
• authentication provider identifiers.

2.2 Service Usage Information

• prompts and other text inputs;
• uploaded images and related assets;
• generated outputs and export metadata;
• task history, timestamps, and status information;
• account settings, billing state, subscription records, and notification preferences.

2.3 Technical Information

• IP address;
• browser and device information;
• log data and diagnostics;
• approximate location derived from network information;
• cookie or session identifiers where applicable.

3. How We Use Information

We may use personal information to:

• create and manage your account;
• authenticate users and secure the Service;
• process prompts, assets, renders, and exports;
• operate billing, credits, subscriptions, and transaction records;
• provide customer support and service communications;
• monitor performance, prevent abuse, and improve the Service;
• comply with legal obligations and enforce our terms.

4. Legal Bases

Where applicable, we process personal information on one or more of the following grounds:

• performance of a contract with you;
• legitimate interests in operating and improving the Service;
• your consent, where required;
• compliance with legal obligations.

5. Sharing of Information

We may share information with:

• cloud hosting, storage, authentication, analytics, and monitoring providers;
• payment processors and billing providers;
• AI model or infrastructure vendors used to generate content;
• professional advisers, auditors, or legal authorities where required.

We do not sell personal information in the ordinary course of providing the Service.

6. User Content and AI Processing

Prompts, uploads, and related metadata may be processed by third-party model or infrastructure providers in order to generate outputs.

Do not submit confidential, sensitive, or regulated information unless your production legal and compliance review explicitly permits such use.

7. Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Service;
• maintain business and accounting records;
• resolve disputes;
• enforce agreements;
• comply with legal obligations.

Retention periods may vary depending on data category, account status, and legal requirements.

8. Security

We use commercially reasonable administrative, technical, and organizational measures to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your information may be processed in countries other than your own, including by vendors and infrastructure providers located internationally. When required, we rely on appropriate transfer mechanisms and contractual protections.

10. Your Rights

Depending on your location, you may have rights to:

• access your personal information;
• request correction or deletion;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request a copy of your data.

To exercise these rights, contact us using the details below.

11. Children

The Service is not intended for children under the age required by applicable law to independently use the Service. If you believe a child has provided personal information unlawfully, contact us so we can review and remove it where appropriate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we may provide notice through the Service or by other reasonable means.

13. Contact

For privacy or data protection questions, contact: privacy@yourdomain.com