Privacy Policy

Account and session data

Google sign-in provides a Google account identifier, email address, display name and profile image when available. We use these to identify your account and display your profile. Authentication uses an essential secure session cookie and server-side session records. We do not receive your Google password.

Payments and Credits

Creem processes checkout and sends payment metadata such as order, checkout, product and event identifiers, payment status and amounts. We store orders, Credit balances, an accounting ledger and payment audit records to reconcile purchases, prevent duplicate grants and investigate disputes. Card details are entered with the checkout provider, not into our editor. The browser may store a checkout order reference and retry identifier so it can check the order safely.

Images and edit requests

We process your uploaded image, original text and replacement text to perform editing and safety checks. We also process generated outputs, image hashes, dimensions, file sizes, job status, provider request identifiers, usage and diagnostic audit metadata. Hashes and audit records help investigate failures and abuse; a hash is not a copy of the image.

Processing providers

Cloudflare Workers runs the application, D1 stores account and job records, and private R2 storage holds uploaded images and outputs. Google provides sign-in. Cloudflare Turnstile processes browser and network signals for bot prevention. Creem handles checkout and payment events. Before image processing, Creem also screens the original and replacement text for content safety; we send a job reference, not image binary data, to its prompt moderation service. We retain the decision, result identifier and time for audit. OpenAI processes images and text for image editing, moderation and safety classification. These providers may process data in locations outside your country under their own terms and privacy practices.

For provider information, see OpenAI’s privacy policy, Cloudflare’s Turnstile privacy notice, Google’s privacy policy and the privacy information supplied in Creem checkout.

Retention and restricted media

Images are temporary assets, not a permanent archive. Access is limited by the configured expiry; download results promptly. Access expiry is separate from physical deletion from storage. We attempt to delete safety-blocked and failed-job media as quickly as practical; cleanup failures can delay deletion. Minimal hashes, safety decisions and audit metadata may remain for security and troubleshooting.

Account, order and ledger records may need to remain longer for accounting, fraud prevention and dispute handling. Retention depends on the record’s purpose and operational requirements; we do not promise that all records or provider-held copies disappear when an image link expires.

Security and analytics

We use access controls, private asset authorization, signed payment verification and audit records to protect accounts and prevent fraud. Infrastructure providers may process IP addresses, browser information and security signals. No system can guarantee absolute security. When configured, PostHog receives anonymous page views and explicit upload, edit, credit-purchase and benchmark interaction events. A random identifier is stored for the browser tab session. We do not send images, entered text, filenames, email addresses or payment identifiers. Page URLs exclude queries and fragments. Automatic interaction capture and session recording are disabled. GA4 and Clarity are not integrated.

Questions and requests

You may request help with account data, access or deletion. We may need to verify account ownership, and some records may need to be retained for security, accounting or applicable obligations.

Contact

For privacy questions or account data requests, email support@typerefit.com. See Contact support for what to include.