Privacy Policy

Effective date: July 19, 2026

This Privacy Policy explains how ImgFast (“ImgFast,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use https://imgfast.org, our AI image tools, accounts, credit purchases, stored results, downloads, and support features (collectively, the “Service”). It also describes your privacy choices.

By using the Service, you acknowledge the practices described here. If you have questions, review our Terms and Conditions or contact support@imgfast.org.

Interpretation and Definitions

For this Privacy Policy:

• Account means the ImgFast account used to access protected features.
• Device means a computer, phone, tablet, or other device used to access the Service.
• Personal Data means information relating to an identified or reasonably identifiable person.
• User Content means prompts, instructions, settings, uploaded images, reference materials, and generated results submitted to or produced through the Service.
• Service Provider means a company that processes information for us to operate the Service, such as authentication, AI model, payment, hosting, database, storage, analytics, email, or support providers.
• Usage Data means technical and activity information generated when the Service is used.
• You means the individual using the Service or the organization on whose behalf the Service is used.

Information We Collect

Information You Provide

Depending on how you use ImgFast, we may collect:

• Account information: name, email address, password-derived authentication records, email-verification status, preferred language, profile details, and account settings. We do not store your plain-text password.
• Third-party sign-in information: if Google, GitHub, or another provider is offered and you choose it, we may receive your provider account identifier, name, email address, profile image, and authentication tokens or related metadata permitted by that provider.
• User Content: text prompts, uploaded images, reference images, selected tools or models, generation settings, and generated or edited image results.
• Payment and credit information: order number, product, price, currency, payment status, transaction or checkout identifiers, credit grants, usage, reversals, and balance history. The payment provider shown at checkout processes your payment credentials; ImgFast does not store full card or bank-account details.
• Support communications: messages, attachments, ticket history, and the information you provide when requesting technical help, privacy assistance, or a refund.

Usage and Technical Data

We may automatically collect:

• IP address, browser type, device type, operating system, language, referring page, requested pages, timestamps, and approximate network location derived from an IP address;
• sign-in, session, security, rate-limit, upload-volume, error, and diagnostic events;
• feature usage, selected tools, task status, processing duration, credit consumption, download events, and deletion events; and
• cookies, local storage, or similar identifiers needed for authentication, language, preferences, security, and service operation.

Images Containing People

Uploaded images may contain a person’s face or likeness. ImgFast processes those images as creative content to perform the tool you select. ImgFast does not use face images as account-authentication biometrics and does not claim to identify who a person is. You must have the rights and consent needed to process another person’s image.

Cookies and Similar Technologies

ImgFast uses essential cookies and similar storage for sessions, authentication, security, language selection, and preferences. Blocking essential cookies may prevent sign-in or other protected features from working.

We may also enable measurement services such as Google Analytics or Plausible to understand aggregate use and improve the Site. These services are used only when configured. Your browser settings and, where available, applicable provider opt-out controls can limit non-essential cookies or analytics. We do not currently use cookies to sell personal data.

How We Use Information

We may use information to:

• create and secure accounts, authenticate sign-ins, maintain sessions, and provide password or verification workflows;
• receive prompts and images, run the selected AI tool, store results, provide task history, and authorize previews and downloads;
• calculate, deduct, restore, and display credits;
• create and reconcile orders, process payments, investigate duplicate or unauthorized charges, and handle refund requests;
• provide support and respond to account, privacy, copyright, abuse, and security requests;
• enforce upload quotas and rate limits, detect fraud or abuse, secure the Service, and protect users and providers;
• diagnose failures, monitor availability, analyze use, and improve product reliability and usability;
• comply with law, enforce our agreements, resolve disputes, and establish or defend legal claims; and
• send service-related communications. We will send promotional communications only where permitted, and you may opt out of them.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where consent is required.

How AI Image Processing Works

When you run a tool, ImgFast sends the minimum content reasonably needed—such as your prompt, uploaded or reference image, selected model, and generation settings—to the AI provider that performs the request. The current Service uses:

• ApiMart for GPT Image 2-powered generation and editing; and
• Replicate for selected image models and specialized operations, such as background processing.

The provider may return a temporary result or task status. ImgFast may then download that result and store it in our Cloudflare R2 bucket so that you can view and download it through the Service. We do not intentionally send your ImgFast password, full payment credentials, or account email to an AI model provider as part of an image-generation request.

AI providers process submitted content under their own terms and privacy practices. Do not submit sensitive Personal Data or images you are not authorized to process. Provider availability may change as models or tools change; the tool interface determines which processing path applies to a request.

Before a text prompt reaches an image-generation or editing model, ImgFast sends the prompt and a pseudonymous internal request identifier to Creem's Moderation API for content-safety screening. The identifier does not contain your email, name, IP address, or complete prompt. ImgFast records the moderation result identifier, decision, environment, timing, and whether the request was blocked, but does not store the full moderation response in ordinary application logs. Creem processes this information under its own terms and privacy practices.

Storage, Retention, and Deletion

Where Information Is Stored

ImgFast runs on Cloudflare infrastructure. Account, session, order, credit, support, and image-task metadata are stored in Cloudflare D1. Uploaded inputs and generated results may be stored as private objects in Cloudflare R2. ImgFast uses controlled or time-limited links to provide access to private image objects.

How Long We Keep Information

We retain information for as long as reasonably necessary to provide the Service, preserve your task history and purchased credits, secure the platform, meet accounting or legal obligations, resolve disputes, and enforce agreements. Retention varies by data type:

• account and credit records are generally kept while the account remains active;
• order and payment records may be kept longer for tax, accounting, fraud prevention, chargeback, and legal requirements;
• User Content and task records may remain available in your history until you delete a result, delete your account, or ask us to remove it, subject to operational and legal exceptions;
• security, rate-limit, diagnostic, and support records are kept for a limited period appropriate to their purpose; and
• deleted information may remain temporarily in backups, provider systems, or fraud and legal records before being removed or isolated through ordinary retention cycles.

Download links can expire even while the underlying result remains in your account history. You should download results you need to keep.

Deleting Results or an Account

Where the interface provides a delete control, you can delete an image task and its ImgFast-managed stored objects. You may also request access, correction, export, or deletion by emailing support@imgfast.org from the address associated with your account. We may need to verify your identity.

Deletion may be limited where information must be retained for legal compliance, payment records, fraud prevention, security, dispute resolution, or the rights of others. Deleting an account may permanently remove access to stored results and unused credits and does not create a refund right.

How We Share Information

We do not sell Personal Data. We may share information:

• with AI providers, including ApiMart and Replicate, to perform requested image operations;
• with Cloudflare for website delivery, application execution, database, security, and object storage;
• with Creem or another payment provider shown at checkout to create and process payments, refunds, disputes, tax handling, and fraud checks;
• with Creem to screen prompts before eligible AI image requests are sent to a model;
• with an authentication provider, such as Google or GitHub, if you choose that sign-in method when available;
• with configured email, analytics, error-monitoring, or customer-support providers where needed to operate those features;
• with professional advisers, auditors, insurers, or transaction counterparties under appropriate confidentiality duties;
• when required by law, court order, or valid government request, or when reasonably necessary to protect rights, safety, users, providers, or the Service; or
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale or transfer of all or part of the Service, subject to applicable law.

Service Providers may process information in countries different from yours. Where required, we use appropriate contractual or legal safeguards for international transfers.

Security

We use reasonable technical and organizational safeguards, including encrypted network connections, authentication, access controls, private object storage, scoped download links, rate limits, and logging. No online transmission or storage system is completely secure, so we cannot guarantee absolute security.

You are responsible for securing your device and credentials, using a unique password, signing out of shared devices, and promptly reporting suspicious activity to support@imgfast.org.

Your Privacy Rights and Choices

Depending on where you live, you may have rights to:

• request access to or a copy of Personal Data;
• correct inaccurate or incomplete information;
• request deletion or restriction of processing;
• object to certain processing or withdraw consent where processing relies on consent;
• request portability of information you provided;
• opt out of promotional communications; and
• complain to a data-protection authority.

These rights may be subject to verification and legal exceptions. To exercise a right, email support@imgfast.org. We will not discriminate against you for making a valid privacy request.

You can also control processing by choosing not to upload an image, deleting available task results, selecting a different tool where an alternative provider is offered, changing browser cookie settings, or discontinuing use of the Service.

Content Restrictions and Privacy of Others

Do not upload another person’s face, likeness, private image, biometric information, or sensitive Personal Data unless you have sufficient rights, authorization, and consent. Do not use ImgFast for non-consensual intimate imagery, deceptive impersonation, privacy invasion, harassment, or unlawful surveillance. We may remove content or restrict accounts that violate our Terms and Conditions.

Children’s Privacy

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect Personal Data from a child. If you believe a child has provided Personal Data, contact support@imgfast.org so we can investigate and take appropriate action.

Do Not Track and Opt-Out Requests

Because there is no universally accepted standard for browser “Do Not Track” signals, the Site may not respond to every such signal. You can limit non-essential measurement through browser controls or contact us regarding a privacy opt-out available under applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy when the Service, providers, or law changes. The effective date above identifies the current version. Changes take effect when posted unless a later date is stated. We may provide additional notice for material changes where reasonably practicable or legally required.

Contact Us

For privacy questions or requests, contact:

ImgFast Support

support@imgfast.org

https://imgfast.org