Privacy Policy

1. Summary of Our Privacy Commitments

• 1-Day (24-Hour) Image Retention: Uploaded input photos and humanized output images are stored privately in Cloudflare R2. They become inaccessible 24 hours after upload and are then automatically deleted (storage deletion can lag by up to about a day).
• Instant Manual Deletion: You can delete any uploaded photo and its output immediately at any time from My Works (/settings/works).
• No AI Model Training: We never use your uploaded photos or generated results to train AI models, and we never publish your photos to any public gallery.
• Transparent Third-Party Processing: Images are sent to Replicate, and through it to OpenAI, solely to run the image model for your request. These providers handle the image under their own API data terms.

2. Information We Collect

1. Account Information: Your name, email address, verification status, and authentication credentials when you sign up or sign in (via email/password or Google OAuth).
2. Uploaded and Processed Images: The JPG, PNG, or WebP files you upload for processing and the resulting PNG output images, along with task metadata (image dimensions, credit cost, status, and expiration timestamp).
3. Billing and Transaction Records: Order numbers, plan or credit pack identifiers, payment amounts, and credit ledger history. Full payment card details are processed directly by our payment providers (such as Stripe) and are never stored on our servers.
4. Essential Technical Logs: IP address, browser type, and rate-limiting counters used strictly for security, abuse prevention, and service reliability.

3. Image Storage and 24-Hour Automatic Deletion

When you submit an image to HumanizePhoto:

1. Your original image and the generated output image are stored in a private Cloudflare R2 bucket under non-guessable keys.
2. An automated Cloudflare R2 lifecycle rule permanently deletes objects under humanize/inputs/ and humanize/outputs/ after 1 day (24 hours).
3. Whenever you click Delete Now in the workspace or in My Works, both the input object and the output object are immediately deleted from Cloudflare R2 and marked as deleted in our database.

4. Third-Party Service Providers (Sub-Processors)

We do not sell your personal data. We share data only with the infrastructure providers required to run the service:

• Replicate, Inc.: Runs the AI image model on the image you submit.
• OpenAI: Provides the underlying image model (GPT Image) that Replicate calls to process your image.
• Cloudflare, Inc.: Hosts the web application (Cloudflare Workers), database (Cloudflare D1), and temporary 24-hour object storage (Cloudflare R2).
• Stripe / Payment Processors: Processes credit pack and subscription payments securely.
• Resend: Sends transactional emails such as account verification and password reset links.

5. Cookies

We use essential cookies to keep you signed in and remember your language and theme preferences. Where non-essential analytics cookies are enabled, you can manage your preference at any time via Cookie Settings in the footer.

6. Your Rights and Contact

You can view and delete your recent photos in My Works, manage your profile and billing in Settings, or contact us through Support Tickets (/settings/tickets) to request account deletion or ask privacy questions. You can also email us at support@humanizephoto.com.