Privacy Policy

Introduction

Welcome to Z-Image AI. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our AI image generation service.

Information We Collect

We collect the following types of information:

• Account Information: When you sign in with Google, we receive your name, email address and profile picture from Google.
• Images You Upload: Product photos, garment flat-lays and any person photos you upload as a model reference. These are the core input to the service.
• Usage Data: How you use the service — which tool you ran, the prompts and settings you submitted, credits spent and timestamps.
• Payment Information: Credit purchases are processed by Stripe. We never see or store your card details.
• Device Information: Browser type, IP address and device information, for security and analytics.
• Generated Content: The images the service produces for you, stored on our object storage.

How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our AI image generation service
• To process your transactions and manage your credits
• To communicate with you about your account, updates, and promotional offers
• To improve and optimize our service and user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

Data Storage and Security

Account records are held in a managed PostgreSQL database hosted in Singapore. Uploaded and generated images are stored on Cloudflare R2. Application hosting is provided by Vercel. Because we use providers in more than one country — including Volcengine Ark, which processes in mainland China — using the service involves international transfer of the images you upload. Data is transmitted over TLS, but no method of transmission over the Internet is completely secure.

Third-Party Services

Running this service means your images and account data pass through the following providers. We list them by name because an image-generation service that only says "cloud providers" is not telling you where your photos actually go:

• Google — sign-in (Google OAuth) and Google Analytics. Subject to Google's Privacy Policy.
• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Cloudflare R2 — storage for the images you upload and the images we generate.
• Vercel — application hosting and delivery.
• AI inference providers — every image you upload is transmitted to a third-party model provider in order to be processed. We currently use Replicate (try-on, background replacement, white background and upscaling), Volcengine Ark (AI model generation) and RunningHub (ghost mannequin). Your image is sent to them; we do not control their internal retention.

Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze service usage. You can control cookie settings through your browser, but disabling cookies may affect some features of our service.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Data Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time

Data Retention

Account data is retained while your account is active. Uploaded and generated images are retained indefinitely on Cloudflare R2 until you ask us to delete them — the service deliberately issues permanent result links rather than expiring ones, so that listings you publish do not break. You can request deletion of your account and images at any time by contacting us.

How Result Links Work

Every image the service produces gets a long, randomly generated URL on our storage domain. That link does not expire and it is not behind a login: anyone who has the URL can open the image. The links are not listed anywhere public and are not guessable in practice, but treat them the way you would treat any unlisted share link — if you paste one into a public place, it is public. If you need an image taken down, contact us and we will delete the object.

Security Measures

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

Children's Privacy

The service is not intended for anyone under 18, and we do not knowingly collect personal information from children. You must not upload photographs of minors. Uploads that appear to depict a minor are prohibited and may be removed and reported. If you believe a child has provided us with personal data, contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at contact@zimageai.art.