Privacy Policy

Operator and scope

Springtide Labs, LLC operates this service. For privacy questions or rights requests, email support@image26.io. This policy covers our handling of data when you visit, create an account, generate or edit images, buy an offer, or contact us. A seller or provider may also handle data under its own privacy terms.

Data and purposes

• Account data: email, name, profile details, sign-in identifiers, authentication and session records, and preferences help us create accounts, authenticate users and provide account functions.
• Creative inputs and results: prompts, reference uploads, generated images, file links and related metadata are processed to perform your requested generation or editing, store results and make them available through the service.
• Tasks and credits: request and task IDs, selected model and options, provider references, status, errors, timestamps, credit grants, expiry, consumption and returns support task recovery, delivery, billing accuracy and dispute handling.
• Purchases: order and subscription references, selected offer, amount, currency, payment status, seller/provider references and billing details support payment reconciliation, subscription management, refunds and required records. Payment providers collect and handle payment-card data; our application does not store full card numbers or card security codes.
• Support and safety: messages, reports, appeals, relevant content and review information are used to answer requests, investigate abuse, enforce our policies and resolve disputes.
• Technical and security data: IP addresses, browser or device information, request times, errors and security-related records may be processed to operate the service, diagnose problems and prevent fraud or unauthorized access.

We process data as needed to provide the requested service and purchases, meet legal obligations, and pursue legitimate interests such as security and dispute resolution where applicable law allows. Where consent is required for an optional use, that use requires the appropriate consent.

AI generation and safety services

Inputs needed for generation or editing are sent to the selected AI service. Safety services may receive prompts, reference images and generated outputs as applicable to the checks being performed. Image flows use OpenAI to review prompts, reference images and generated images. A request or result may be blocked or unavailable when review rejects it, remains unresolved, or cannot be completed. These automated services can make mistakes and do not guarantee that every violation is detected.

Provider processing, retention and any use of data depend on the provider's applicable terms and the arrangement for the selected service. This policy does not promise that every provider excludes training or immediately deletes inputs. Avoid submitting sensitive personal information or confidential material that you are not authorized to share with these services.

Other recipients and international processing

Hosting, file storage, authentication, payment and support services receive data needed for their roles. Authorized operator personnel may access relevant records to provide support, handle reports, maintain the service or comply with law. We may disclose necessary data in response to a valid legal requirement, to address fraud or threats, or in a business transfer subject to applicable safeguards. Recipients may process data in countries other than yours; applicable transfer requirements must be met.

For Stripe Managed Payments transactions, the Stripe/Link seller identified at checkout handles the transaction in its merchant-of-record role. Ordinary Stripe processing does not by itself make Stripe the seller. For Waffo Pancake transactions, the seller and payment handling are identified in checkout and receipt terms. See the Terms of Service for the distinction between the product operator and transaction seller.

Cookies and optional services

Cookies and similar browser storage support sign-in, security, language, appearance and preference choices. If optional analytics or marketing services are enabled, their use must follow the site's applicable notice and consent choices. You can manage browser storage in your browser; blocking essential cookies can affect sign-in. Where the site offers cookie settings, use those to review optional choices.

Retention, file links and security

Media are retained according to the service and feature in use, available deletion functions, and requests handled by the operator. Uploading a reference image does not mean its source file is automatically deleted after generation. Account, task, credit, payment, support and safety records may be kept for legitimate service, accounting, fraud prevention, dispute or legal needs. Deletion requests can be subject to these needs, provider retention and backup handling; we do not promise immediate erasure of every copy.

Some image or download links can be opened by anyone who has the link, even when the account's history page requires sign-in. Keep those links private if you do not want others to access the files. Account access controls are not a guarantee that a shared file link is confidential. Security measures reduce risk but cannot guarantee absolute confidentiality or security. Report a suspected exposure to our contact above.

Requests and your rights

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection to processing, or withdrawal of consent where processing relies on it. Email our contact with the account email, the request and enough context to locate the relevant records. Do not send passwords, payment-card details or unnecessary sensitive documents. We may need proportionate identity verification and will explain applicable limitations. Rights and response periods depend on applicable law; you may also complain to the relevant supervisory authority. Contact us by email for these requests.

The service is not designed for children. Contact us if you believe a child has supplied personal data so we can assess the request and applicable obligations.

Changes and related policies

Updates carry the date shown above. Material changes require any notice or consent required by applicable law; changing a page date alone does not replace those steps. Read the Acceptable Use Policy for content reporting and the Refund Policy for purchase requests.