Privacy Policy
Last updated September 1, 2026
This Privacy Policy (the “Policy”) describes how Chatonline LLC, a limited liability company incorporated under the laws of the State of Delaware, with its registered address at 3500 South DuPont Hwy, Dover 19901, United States of America (the “Platform Operator”, “We”, “Our”, or “Us”), collects, obtains, uses, stores, discloses, shares, retains, and otherwise processes personal information in connection with the website available at www.imagehelp.com (the “Website”), the ImageHelp software platform and any related applications or interfaces (the “Platform”), and all related image editing, background removal, resizing, cropping, format conversion, compression, enhancement, watermarking, file storage, subscription, and other features, products, and services made available through the Website or the Platform (collectively, the “Services”).
The Services enable users (“You” or “Users”) to upload images, photographs, graphics, and other supported files (“Uploaded Content”) and to edit, transform, or otherwise process them using automated and AI-assisted tools in order to receive edited images, files, previews, and other results (“Outputs”).
In providing the Services, We may process information provided directly by You, information generated through Your use of the Services, and the contents of Your Uploaded Content and Outputs, which may include images of You or other individuals.
Certain payment processing, recurring billing, payment recovery, fraud-prevention, and related payment activities may be performed or facilitated by affiliated or authorized payment processing entities (“Payment Processing Entities”) and other authorized payment service providers. Such parties may process transaction-related information, billing identifiers, tokenized payment credentials, payment-status information, fraud-prevention information, and related data. Full payment-card details may be collected and processed directly by authorized third-party payment providers and are not necessarily received or stored by the Platform Operator.
Your use of the Services is also governed by Our Terms and Conditions (the “Terms”). Capitalized terms not otherwise defined in this Policy have the meanings given to them in the Terms.
We process personal information in accordance with applicable privacy and data protection laws, including, where applicable, the GDPR, UK GDPR, the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), and other applicable U.S. state privacy laws.
1. Personal Information We Collect
Personal Information You Provide to Us
1.1. “Personal information” includes “personal data” and similar terms under applicable privacy laws and generally means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual.
1.2. Depending on how You interact with the Services, We may collect information that You provide directly to Us, including:
1.2.1. Account and contact information, such as Your name, email address, Account identifiers, authentication information, and other information used to create, maintain, or secure Your Account;
1.2.2. Uploaded Content, including images and other files You upload, together with associated file information such as file name, format, size, dimensions, and embedded metadata (for example, EXIF data such as camera model, capture date, or location, where present in the file);
1.2.3. payment and transaction information, including billing information, transaction identifiers, payment status, Subscription information, refunds, cancellations, chargebacks, and payment-recovery information. Full payment-card details may be processed directly by authorized payment providers;
1.2.4. communications and support information that You provide when contacting Us, submitting a privacy request, reporting a problem, or otherwise communicating with Us; and
1.2.5. other information that You voluntarily provide through the Services.
Uploaded Content and Outputs
1.3. When You use an editing tool, We process Your Uploaded Content and related technical information as reasonably necessary to perform the requested operation and deliver the Output. This may include transmitting, hosting, reproducing, cropping, resizing, converting, compressing, analyzing, segmenting, or creating temporary derivative files from the Uploaded Content.
1.4. Uploaded Content may depict identifiable individuals, including You or other people. Certain tools, such as background removal, may automatically detect people, faces, or objects within an image solely to perform the requested edit, for example to separate a subject from its background. We do not use Uploaded Content to identify individuals, do not perform facial recognition, and do not create or maintain biometric identifiers or biometric templates from Uploaded Content.
1.5. Where any processing of Uploaded Content would constitute biometric information, biometric data, sensitive personal information, or special-category personal data under applicable law, We will process such information only where an appropriate legal basis exists and will obtain consent or implement other safeguards where specifically required by applicable law.
1.6. Uploaded Content is not treated as publicly submitted user content merely because it is uploaded to the Services. Except where separately disclosed and You have given any consent required by applicable law, We do not use Uploaded Content or Outputs for advertising or promotional purposes or to train general-purpose artificial intelligence or machine-learning models.
1.7. You are responsible for ensuring that You have any right, authority, permission, consent, or other lawful basis required to upload, edit, and use an image through the Services, including where the image depicts another person. Additional restrictions concerning Uploaded Content are set out in the Terms.
Information Collected Automatically
1.8. When You access or use the Services, We and Our authorized service providers may automatically collect technical, device, usage, security, and interaction information, including device and browser information, operating system, language settings, IP address and approximate location derived from it, online or device identifiers, access and session information, pages, tools, and features used, editing operations performed, referral and navigation information, authentication events, error and diagnostic data, security and fraud signals, and transaction-related technical information.
1.9. We may also collect information through cookies, pixels, SDKs, local storage, and similar technologies, as further described in Section 4 and any applicable Cookie Policy.
File History and Stored Files
1.10. Where File History or similar functionality is available, We may temporarily store Uploaded Content and Outputs and associate them with Your Account (“Stored Files”) so that You may re-access and download them. Stored Files are accessible only through Your Account and are not publicly searchable, indexed for public discovery, or made available to other Users. Applicable retention periods are described in Section 6.
Information We Receive from Other Sources
1.11. We may receive personal information from authorized service providers and other third parties involved in providing or supporting the Services, including payment and billing providers, fraud-prevention and security providers, hosting and infrastructure providers, image-processing providers, and analytics and communications providers.
1.12. We may combine information received from these sources with other information described in this Policy where reasonably necessary to provide, operate, secure, administer, and improve the Services, process payments, prevent fraud or abuse, comply with legal obligations, or establish, exercise, or defend legal claims.
2. How We Use Your Personal Information
2.1. We process personal information only where reasonably necessary for the purposes described in this Policy and as otherwise permitted or required by applicable law.
2.2. Depending on the relevant information and circumstances, We may process personal information for the following purposes:
2.2.1. to provide, operate, administer, maintain, and support the Services, including creating and managing Accounts, processing Uploaded Content, performing requested editing operations, generating and delivering Outputs, and maintaining available File History functionality;
2.2.2. to process and administer Trial Memberships, Subscriptions, payments, billing, refunds, cancellations, payment recovery, chargebacks, and other transaction-related activities;
2.2.3. to authenticate Users, maintain the security and integrity of the Services, detect and prevent fraud, unauthorized access, abuse, automated or prohibited use, and investigate suspected violations of the Terms or applicable law, including the upload or creation of prohibited content;
2.2.4. to provide customer support, respond to communications, and administer privacy requests;
2.2.5. to understand how the Services are used, diagnose technical issues, measure performance, conduct internal analytics and research, and improve the functionality, reliability, usability, and security of the Services;
2.2.6. to send transactional, administrative, billing, security, support, and other service-related communications and, where permitted by applicable law, marketing or promotional communications;
2.2.7. to comply with applicable legal, regulatory, tax, accounting, court, law-enforcement, payment-network, and other binding requirements; enforce the Terms; protect Our rights, property, systems, Users, and third parties; and establish, exercise, or defend legal claims;
2.2.8. to operate and manage Our business, including in connection with an actual or proposed financing, investment, merger, acquisition, reorganization, sale, transfer, insolvency, or similar corporate transaction; and
2.2.9. for another purpose disclosed to You at the time of collection, with Your consent where required, or as otherwise permitted by applicable law.
Legal Bases for Processing
2.3. Where the GDPR, UK GDPR, or another applicable law requires a legal basis for processing personal information, We rely on one or more of the following legal bases, depending on the relevant processing activity:
2.3.1. We process personal information where necessary to enter into or perform a contract with You, including to administer Your Account, process Uploaded Content, perform requested editing operations, deliver Outputs, administer Trial Memberships and Subscriptions, process payments, and provide customer support;
2.3.2. We may process personal information where necessary for Our legitimate interests or those of a third party, provided those interests are not overridden by the rights and interests of the relevant individual. Such interests may include operating, securing, maintaining, and improving the Services; preventing fraud and abuse; administering payments and disputes; and protecting Our business, systems, Users, and third parties;
2.3.3. We process personal information where necessary to comply with applicable legal, regulatory, tax, accounting, consumer-protection, court, law-enforcement, payment, or other legally binding obligations;
2.3.4. We rely on consent where required by applicable law, including for certain marketing activities, cookies or similar technologies, or any processing of sensitive personal information where consent is the applicable required legal basis. Where processing is based on consent, You may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal; and
2.3.5. We may process personal information where necessary to establish, exercise, or defend legal claims or where another legal basis is available under applicable law.
Individuals Depicted in Uploaded Content
2.4. Uploaded Content may contain images of individuals who are not Users and who have not provided information directly to Us. We process such images only on Your instructions and only as necessary to perform the editing operations You request, deliver the resulting Outputs, maintain Stored Files, and maintain the security and integrity of the Services.
2.5. You are responsible for ensuring that Your upload, editing, and subsequent use of any image depicting another person complies with applicable law and the Terms, including by obtaining any consent required from that person. Your upload of an image does not replace or determine the legal basis on which We process personal information as Platform Operator.
2.6. We do not use images processed through the Services to make decisions about the individuals depicted in them, to profile them, or to make solely automated decisions producing legal or similarly significant effects concerning them.
Automated Processing
2.7. Many tools within the Services rely on automated processing, including machine-learning models, to transform images. Such processing is performed solely to produce the Output You request and does not involve automated decision-making that produces legal or similarly significant effects concerning You.
Data Minimization and Purpose Limitation
2.8. We seek to process personal information that is reasonably relevant and necessary for the purposes described in this Policy and to limit processing to purposes that are compatible with the purpose for which the information was collected, except where another lawful basis permits further processing.
3. How We Share Your Personal Information
3.1. We may disclose personal information to third parties where reasonably necessary to provide, operate, secure, administer, and improve the Services, process payments, comply with legal obligations, protect Our rights and interests, or for other purposes described in this Policy.
Service Providers
3.2. We may disclose personal information to service providers that perform services on Our behalf or support Our operations, including hosting, file storage, content delivery, infrastructure, cloud computing, communications, customer support, analytics, security, fraud prevention, payment administration, and other technical or business services. Such providers may process personal information only as permitted by their applicable agreements, roles, and legal obligations.
Image-Processing Providers
3.3. To perform certain editing operations, We may transmit Uploaded Content and related technical information to authorized image-processing, machine-learning, or AI service providers that process it on Our behalf solely to generate the requested Output. We require such providers to process Uploaded Content only on Our instructions and not to use it to train their own models, except where separately disclosed and permitted by applicable law.
Payment, Billing and Payment Recovery
3.4. We may disclose relevant Account, transaction, billing, device, technical, and fraud-prevention information to Payment Processing Entities, payment processors, merchants of record, acquiring banks, billing providers, payment-recovery providers, fraud-prevention providers, and other parties reasonably necessary to process or administer payments, Trial Memberships and Subscriptions, refunds, cancellations, failed-payment recovery, chargebacks, payment disputes, and related activities.
3.5. Where reasonably necessary to prevent or investigate fraud, abuse, unauthorized transactions, chargebacks, payment disputes, or violations of the Terms, We may disclose relevant information to payment providers, financial institutions, fraud-prevention providers, card networks, advisers, insurers, dispute-resolution providers, or other appropriate parties. Such information may include transaction records, Account information, technical or device information, authentication records, and evidence relating to the relevant transaction or use of the Services.
Legal, Regulatory and Protective Disclosures
3.6. We may disclose personal information, including Uploaded Content, where We reasonably believe disclosure is required or permitted by applicable law, regulation, legal process, court order, governmental or regulatory request, or where reasonably necessary to investigate unlawful activity, report content depicting the abuse or exploitation of minors to the appropriate authorities, enforce the Terms, protect the rights, property, safety, or security of the Platform Operator, Users, or third parties, or establish, exercise, or defend legal claims. Where permitted by applicable law, We may provide notice of such disclosure where appropriate, but We are not required to provide notice where prohibited by law or where notice could reasonably compromise an investigation, legal process, security measure, or the rights or safety of another person.
Professional Advisers and Corporate Transactions
3.7. We may disclose personal information to Our lawyers, accountants, auditors, insurers, consultants, financial advisers, and other professional advisers where reasonably necessary for them to provide services to Us, subject to applicable confidentiality, contractual, professional, and legal obligations.
3.8. We may disclose or transfer personal information in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, insolvency, sale or transfer of assets, change of control, or similar corporate transaction, including as part of due diligence, subject to applicable law and appropriate confidentiality or other safeguards where required.
Affiliates and Disclosures at Your Direction
3.9. We may disclose personal information to Our affiliates where reasonably necessary for the purposes described in this Policy, and to another person or entity where You direct or request Us to do so, request functionality that requires the disclosure, or provide consent where consent is required by applicable law.
Aggregated and De-Identified Information
3.10. We may create, use, and disclose aggregated, anonymized, or de-identified information that does not reasonably identify an individual for analytics, research, security, product development, business operations, or other lawful purposes. Where applicable law requires such information to remain de-identified, We will take reasonable measures to maintain it in that form and will not attempt to re-identify it except where permitted by applicable law.
Sale, Sharing and Targeted Advertising
3.11. We do not sell personal information for monetary consideration. We do not sell or share Uploaded Content, Outputs, or Stored Files, and do not disclose them to third parties for their own independent advertising purposes.
3.12. Certain privacy laws define “sale”, “sharing”, “targeted advertising” or similar terms broadly and may treat certain disclosures involving advertising, analytics, cookies, pixels, or similar technologies as sale, sharing, or targeted advertising even where no money is exchanged. Where Our activities fall within such definitions, We will provide applicable notices and opt-out mechanisms as required by law.
3.13. We do not knowingly sell or share personal information relating to minors where applicable law requires prior affirmative authorization and such authorization has not been obtained.
4. Cookies, Tracking Technologies and Analytics
Cookies and Similar Technologies
4.1. We and Our authorized service providers may use cookies, pixels, software development kits (“SDKs”), local storage, tags, scripts, and similar technologies (collectively, “Cookies and Similar Technologies”) in connection with the Website, Platform, and Services.
4.2. Cookies and Similar Technologies may collect or store information such as device and browser information, IP address and approximate location, online identifiers, session information, referring pages, and information about Your interactions with the Services.
4.3. Depending on the technology used and Your jurisdiction, We may use Cookies and Similar Technologies for strictly necessary functions, authentication and security, fraud prevention, remembering settings and privacy choices, analytics and performance measurement, functionality and personalization, and advertising or marketing measurement and attribution.
Your Choices and Consent
4.4. Where applicable law requires prior consent for non-essential Cookies and Similar Technologies, including applicable analytics, advertising, attribution, or marketing technologies, We will not activate or use those technologies until the required consent has been obtained through Our cookie consent mechanism or another legally valid method. Strictly necessary technologies may be used without consent where permitted by applicable law. Acceptance of this Privacy Policy, the Terms, or use of the Services does not, by itself, constitute consent to non-essential Cookies where separate consent is required by applicable law.
4.5. Where available, You may manage Your choices through Our cookie consent or privacy settings and may also control certain technologies through Your browser or device settings. Disabling certain technologies may affect the availability or functionality of parts of the Services. Where processing is based on consent, You may withdraw that consent at any time, without affecting processing that occurred before withdrawal.
Analytics
4.6. We may use analytics and performance providers to understand how the Services are accessed and used, measure traffic and engagement, identify technical or performance issues, and improve the Services. Depending on the provider and configuration, such providers may process IP addresses, device and browser information, online identifiers, approximate location, session information, referral information, and interactions with the Services.
4.7. Where consent is required for a particular analytics technology, We will use that technology only after obtaining the required consent.
Advertising and Attribution Technologies
4.8. We may use advertising, attribution, and marketing technologies to understand how Users discover the Services, measure campaign effectiveness, attribute registrations, purchases, or other interactions to marketing campaigns, and, where permitted by applicable law, provide or measure advertising. Relevant providers may receive online identifiers, cookie identifiers, IP address information, device or browser information, referral information, and information about events such as visits, registrations, or purchases.
4.9. We do not disclose Uploaded Content, Outputs, or Stored Files to advertising providers, and do not use the contents of Your images to create advertising profiles or to target advertising.
4.10. Certain uses of advertising, analytics, or similar technologies may constitute a “sale”, “sharing”, use for “targeted advertising”, or a similar regulated activity under applicable U.S. state privacy laws even where no money is exchanged. Where applicable, We will provide required notices and opt-out mechanisms and will recognize browser-based opt-out preference signals, including Global Privacy Control (“GPC”), where required by applicable law.
Third-Party Technologies
4.11. Certain Cookies and Similar Technologies may be provided or controlled by third parties and may also be subject to their own privacy practices. Additional information concerning the Cookies and Similar Technologies currently used, including their purposes, providers, retention periods, and available choices, may be provided through Our cookie consent tool or a separate Cookie Policy.
5. International Data Transfers
Processing Outside Your Country
5.1. The Platform Operator is established in the United States. We and Our service providers, Payment Processing Entities, image-processing providers, and other recipients described in this Policy may process personal information in the United States and other countries outside the jurisdiction in which You are located. Those jurisdictions may have privacy and data protection laws that differ from those of Your jurisdiction.
Transfer Safeguards
5.2. Where applicable law requires specific safeguards for an international transfer of personal information, We will use an appropriate lawful transfer mechanism. Depending on the circumstances, this may include an adequacy decision, the European Commission’s Standard Contractual Clauses (“SCCs”), the UK International Data Transfer Agreement or UK Addendum to the SCCs, or another transfer mechanism or derogation recognized under applicable law.
5.3. Where appropriate or required, We may implement supplementary technical, contractual, or organizational measures having regard to the nature of the personal information, the recipient, the destination jurisdiction, and applicable legal requirements.
Third-Party Processing
5.4. Our service providers and other recipients may use infrastructure, personnel, subprocessors, or other service providers located in multiple jurisdictions. Where required by applicable law and appropriate to the recipient’s role, We require applicable contractual or other safeguards.
Further Information
5.5. Where required by applicable law, You may contact Us using the details in Section 15 to request further information about the safeguards applicable to transfers of Your personal information, subject to applicable confidentiality, security, and legal restrictions.
6. Data Retention and Deletion
General Retention Principles
6.1. We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including to provide and operate the Services, maintain Accounts, process transactions and Subscriptions, prevent fraud and abuse, maintain security, resolve disputes, comply with legal, tax, accounting, regulatory, and payment-related obligations, enforce the Terms, and establish, exercise, or defend legal claims.
6.2. Retention periods may vary depending on the nature and sensitivity of the information, the purposes of processing, applicable legal or contractual requirements, security and fraud risks, technical requirements, and whether continued retention is reasonably necessary for a permitted purpose.
Account Information
6.3. We may retain Account information for as long as Your Account remains active and thereafter for a reasonable period where necessary for the purposes described in this Policy. If You submit a valid Account deletion request, We will delete, de-identify, or otherwise restrict relevant personal information in accordance with applicable law, subject to information We are permitted or required to retain.
Uploaded Content and Temporary Processing Files
6.4. Uploaded Content processed without an Account, and temporary processing files created while performing an editing operation, may be retained for up to seven (7) days after upload or processing, unless a shorter period applies or longer retention is reasonably necessary for security, fraud prevention, troubleshooting, dispute resolution, compliance with applicable law, or the establishment, exercise, or defense of legal claims.
6.5. After the applicable retention period, such files will be deleted or otherwise made unavailable from active systems within a commercially reasonable period, subject to limited backup, security, fraud-prevention, dispute, or legally required retention.
File History and Stored Files
6.6. Where File History functionality is available, Stored Files may be retained and associated with Your Account for up to one hundred twenty (120) days after upload or generation, unless a different period is disclosed through the Services or longer retention is reasonably necessary or required for security, fraud prevention, dispute handling, legal compliance, or the establishment, exercise, or defense of legal claims. The general retention period described in this Section does not override a deletion, erasure, objection, or restriction request that We are required to honor under applicable law.
6.7. After the applicable retention period, Stored Files will be deleted or otherwise made unavailable from active systems within a commercially reasonable period. Where functionality allows You to delete an individual Stored File or clear Your File History earlier, the relevant file will be removed from Your accessible File History, subject to limited retention in backups or other records We are permitted or required to retain.
Payment, Fraud, Security and Legal Records
6.8. We may retain payment, billing, Subscription, transaction, refund, cancellation, payment-recovery, chargeback, and payment-dispute information for as long as reasonably necessary to document transactions, comply with legal, tax, accounting, payment-network, anti-fraud, and other applicable requirements, resolve disputes, recover validly incurred amounts, and establish, exercise, or defend legal claims.
6.9. We may retain information reasonably necessary to detect, investigate, document, or prevent fraud, abuse, unauthorized access, security incidents, violations of the Terms, chargeback abuse, or other unlawful or prohibited activity, including Uploaded Content relevant to suspected prohibited content. Information relevant to an actual or reasonably anticipated complaint, investigation, dispute, legal claim, regulatory matter, or proceeding may be retained until the matter is resolved and for any additional period permitted or required by applicable law.
Backups and Deletion
6.10. Personal information deleted from active systems may remain temporarily in backup or disaster-recovery systems until the relevant backup is overwritten, deleted, or otherwise expires in accordance with Our backup practices. Such information will not be restored to active use except where reasonably necessary for disaster recovery, security, legal compliance, or another permitted purpose.
De-Identified Information and Legal Exceptions
6.11. We may retain aggregated, anonymized, or de-identified information that no longer reasonably identifies an individual for longer periods where permitted by applicable law. Any deletion or erasure right remains subject to applicable legal exceptions, including where retention is permitted or required to complete a transaction, provide a requested Service, maintain security and integrity, prevent fraud or abuse, comply with legal obligations, exercise or defend legal claims, or for another legally permitted purpose.
7. Your Privacy Rights and Requests
Your Privacy Rights
7.1. Depending on Your place of residence and applicable law, You may have certain rights concerning personal information that We process about You. These rights may vary depending on the jurisdiction, nature and source of the information, Our role in the relevant processing, and applicable legal exceptions.
7.2. Subject to applicable law, Your rights may include the right to:
7.2.1. request confirmation as to whether We process personal information concerning You and obtain access to such information;
7.2.2. request correction of inaccurate or incomplete personal information;
7.2.3. request deletion or erasure of personal information;
7.2.4. request restriction of certain processing;
7.2.5. object to certain processing, including processing based on legitimate interests and processing for direct marketing purposes where applicable;
7.2.6. request portability of personal information where the right applies;
7.2.7. withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
7.2.8. opt out of the sale or sharing of personal information or processing for targeted advertising, and limit certain uses or disclosures of sensitive personal information, where such rights apply;
7.2.9. request information concerning applicable categories and sources of personal information, purposes of processing, and categories of recipients;
7.2.10. appeal Our decision concerning a privacy request where applicable law provides such a right; and
7.2.11. lodge a complaint with a competent privacy, data protection, or supervisory authority.
7.3. We will not unlawfully discriminate or retaliate against You for exercising a privacy right available under applicable law.
Individuals Depicted in Images
7.4. You do not need to have an Account or to have used the Services to submit a privacy request. If You believe that an image depicting You has been uploaded to the Services by another person, You may submit a request using the methods described in this Policy. Because Stored Files are private to the Account that uploaded them and We do not identify individuals in images, We may need additional information from You to locate any relevant file.
Verification of Requests
7.5. We may take reasonable steps to identify the relevant information and verify the identity or authority of a person submitting a privacy request. Depending on the request, We may ask You to confirm the email address associated with the relevant Account, provide a verification code or one-time password sent to a contact method under Your control, or complete another reasonable verification procedure. We will use verification information primarily to process the request, prevent fraudulent or abusive requests, maintain appropriate records, and comply with applicable law, and will not request information disproportionate to the nature or sensitivity of the request except where reasonably necessary or required by law.
Stored Files and Account Deletion
7.6. Where We grant a valid deletion, erasure, objection, or restriction request, We will take reasonable and appropriate steps to apply it to relevant Stored Files and other active systems under Our control where required by applicable law and reasonably technically feasible. Limited copies may remain in backups, security records, fraud-prevention records, dispute records, or other records that We are permitted or required to retain.
7.7. You may request deletion of Your Account through functionality made available through the Services or by contacting Us using the methods described in this Policy. Account deletion does not require deletion of information We are permitted or required to retain, including transaction, payment, security, fraud-prevention, dispute, and legal records.
Authorized Agents
7.8. Where permitted by applicable law, You may authorize another person to submit a privacy request on Your behalf. We may require reasonable evidence of the agent’s authority and may require You to verify Your identity or confirm the authorization directly with Us, except where applicable law provides otherwise.
Submitting and Responding to Requests
7.9. Privacy requests may be submitted using the privacy tools made available through the Website or Platform, or by contacting Us at [email protected]. Please provide sufficient information to allow Us to identify the request and the personal information concerned.
7.10. We will respond to verified privacy requests within the period required by applicable law. Where permitted, We may extend the response period where reasonably necessary and will provide any notice required by law.
7.11. Privacy requests are generally processed without charge. Where permitted by applicable law, We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, repetitive, fraudulent, or abusive, and will provide any explanation or appeal information required by applicable law.
7.12. Privacy rights are not absolute. We may deny or limit a request where permitted or required by applicable law, including where necessary to protect the rights and freedoms of others, maintain security and integrity, prevent fraud or abuse, comply with legal obligations, preserve privileged or confidential information, or establish, exercise, or defend legal claims.
8. Security and Security Incidents
Security Measures
8.1. We implement and maintain reasonable and appropriate technical, organizational, and administrative measures designed to protect personal information against unauthorized or unlawful access, acquisition, use, disclosure, alteration, destruction, loss, or other unauthorized processing, taking into account the nature and sensitivity of the information, associated risks, available technology, and applicable legal requirements.
8.2. Depending on the relevant systems and information, such measures may include access and authentication controls, encryption or other protections for information and files in transit or at rest where appropriate, logging and monitoring, infrastructure security, vulnerability management, fraud and abuse prevention, backup and recovery procedures, personnel access restrictions, and appropriate requirements for relevant service providers. Access to personal information and Stored Files is intended to be limited to persons who reasonably require it for legitimate purposes and are subject to appropriate confidentiality, security, or contractual obligations.
No Absolute Security and Account Security
8.3. No website, platform, transmission method, or information system can be guaranteed to be completely secure. Although We maintain measures designed to protect personal information, We cannot guarantee that unauthorized access, acquisition, use, disclosure, alteration, loss, or destruction will never occur.
8.4. You are responsible for taking reasonable steps to protect Your Account and access credentials, including Your email account, passwords, authentication links, verification codes, and devices. If You know or reasonably suspect that Your Account or an access method used with the Services has been compromised, You should promptly contact Us using the details in Section 15.
Security Monitoring and Incidents
8.5. We may process relevant technical, Account, device, transaction, usage, Uploaded Content, and other information where reasonably necessary to detect, investigate, prevent, or respond to security incidents, unauthorized access, fraud, abusive or prohibited use, automated access, payment abuse, or other activity that may threaten the security or integrity of the Services, Users, or third parties. Where reasonably necessary, We may restrict, suspend, or investigate Account activity or functionality and retain relevant records as described in Section 6.
8.6. If We become aware of a security incident involving personal information, We may investigate, contain, mitigate, remediate, and document the incident and cooperate with relevant service providers, cybersecurity professionals, insurers, payment providers, regulators, law-enforcement authorities, or other appropriate parties. Where applicable law requires notification of a personal data breach or other security incident, We will provide the required notifications in the manner and within the time periods required by law.
Third-Party Security
8.7. The Services rely in part on third-party infrastructure, hosting, file storage, image-processing, payment, communications, security, and other providers. We take reasonable steps to select and manage relevant providers and impose appropriate privacy and security requirements where required by applicable law. Third parties may operate systems outside Our direct control, but nothing in this Section limits any responsibility that We are required to assume under applicable law for service providers processing personal information on Our behalf.
9. Children’s Privacy
Age Requirements
9.1. The Services are intended only for individuals who are at least eighteen (18) years old or have reached the age of legal majority in their jurisdiction, whichever is higher. We do not knowingly permit individuals who do not meet the applicable age requirement to create an Account, purchase a Trial Membership or Subscription, or use the Services.
9.2. We do not knowingly collect personal information directly from children for the purpose of allowing them to use the Services. If We become aware that an individual who does not meet the applicable age requirement has created an Account or provided personal information directly to Us in connection with use of the Services, We may suspend or terminate the Account and delete, restrict, or otherwise process the relevant information as required or permitted by applicable law.
Images of Minors
9.3. Uploaded Content may in some circumstances depict minors, for example in family photographs. Users are responsible for ensuring they have the authority, such as parental or guardian authority, and any consent required by applicable law to upload and edit such images. Users must not use the Services to create, edit, or distribute content that exploits, sexualizes, harasses, or otherwise harms a minor. Such content is strictly prohibited under the Terms and will be reported to the appropriate authorities.
Requests Concerning Minors
9.4. A parent, legal guardian, or other person legally authorized to act on behalf of a minor may submit an applicable privacy request concerning an image of that minor using the methods described in Section 7, subject to reasonable verification of identity and authority.
10. Communications and Marketing
Service and Transactional Communications
10.1. We may use Your contact information to send transactional, administrative, security, billing, privacy, support, and other service-related communications reasonably necessary in connection with Your Account, purchases, Trial Membership, Subscription, or use of the Services. These may include authentication messages, purchase confirmations, payment receipts, Subscription or Trial Membership notices, cancellation confirmations, payment failure or recovery notices, security alerts, privacy-request communications, and material service-related notices.
10.2. Because certain communications are necessary to provide, administer, secure, or comply with legal obligations relating to the Services, You may not be able to opt out of them while maintaining the relevant relationship with Us. Opting out of marketing communications does not prevent Us from sending non-promotional communications where reasonably necessary or permitted by applicable law.
Marketing and Promotional Communications
10.3. Where permitted by applicable law, We may use Your contact information to send marketing or promotional communications concerning the Services, features, offers, promotions, or other products or services. Where prior consent is required, We will obtain the required consent before sending such communications.
10.4. You may unsubscribe from marketing communications at any time using the unsubscribe mechanism included in the relevant communication or another method made available by Us. We may retain limited information reasonably necessary to record and honor Your marketing preference and prevent communications from being sent contrary to Your request.
Communication Analytics and Service Providers
10.5. Where permitted by applicable law and, where required, with Your consent, communications sent by Us or Our authorized providers may use technologies that allow Us to determine whether a message was delivered, opened, or interacted with or whether a link was selected. We may use this information to administer communications, measure effectiveness, troubleshoot delivery, prevent fraud or abuse, and improve Our communications.
10.6. We may use authorized third-party providers to deliver email or other communications. Such providers may process contact information, delivery information, technical identifiers, and interaction information as reasonably necessary to provide the relevant services. If We introduce a communication channel subject to additional consent, disclosure, or opt-out requirements, We will comply with those requirements before using it for the relevant purpose.
Use of Image Content for Marketing
10.7. We do not use the contents of Your Uploaded Content or Outputs to personalize marketing communications, and We do not use Your images in Our own marketing or promotional materials without Your separate, express consent.
11. U.S. State Privacy Rights
11.1. Residents of certain U.S. states may have additional rights concerning their personal information under applicable state privacy laws. Depending on Your state of residence and applicable law, these rights may include the right to access, correct, delete, or obtain a portable copy of personal information; obtain information about Our collection, use, and disclosure of personal information; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain uses or disclosures of sensitive personal information; appeal certain decisions concerning privacy requests; and exercise applicable privacy rights without unlawful discrimination.
11.2. The categories of personal information We may collect, the sources from which We obtain it, the purposes for which We process it, and the categories of recipients to whom We may disclose it are described in this Privacy Policy.
11.3. We do not sell personal information in exchange for money unless expressly disclosed to You. Certain disclosures to advertising, analytics, or other third parties may nevertheless constitute a “sale”, “sharing”, or processing for “targeted advertising” under applicable U.S. state privacy laws even where no money is exchanged. Where We engage in such activities, We will provide any notice and opt-out mechanism required by applicable law.
11.4. We do not sell or share Uploaded Content, Outputs, or Stored Files, and do not use them to allow third parties to target advertising.
11.5. Where required by applicable law, We recognize qualifying browser-based universal opt-out preference signals, including Global Privacy Control (“GPC”), as a request to opt out of applicable sale, sharing, or targeted advertising activities.
11.6. Where We process personal information that qualifies as sensitive personal information or sensitive data under applicable U.S. state privacy laws, We will comply with any consent, limitation, opt-out, or other requirements applicable to that processing. We do not use sensitive personal information to infer characteristics about a User or any individual depicted in an image for advertising purposes.
11.7. We do not knowingly sell or share personal information relating to minors where applicable law requires prior affirmative authorization and such authorization has not been obtained.
11.8. You may exercise applicable U.S. state privacy rights using the methods described in Section 7. We may take reasonable steps to verify Your identity or authority before processing a request. Where applicable law permits an authorized agent to act on Your behalf, We may require reasonable evidence of that authority.
11.9. We will respond to valid requests within the periods required by applicable law. Where applicable law provides a right to appeal Our decision concerning a privacy request, You may submit an appeal by contacting Us at [email protected].
12. EEA, UK and Switzerland Privacy Rights
12.1. If You are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, applicable data protection law may provide You with additional rights concerning Your personal data.
12.2. Subject to applicable conditions, exceptions, and limitations, these rights may include the right to:
12.2.1. access Your personal data and obtain information about how We process it;
12.2.2. request correction of inaccurate or incomplete personal data;
12.2.3. request deletion of Your personal data;
12.2.4. request restriction of processing;
12.2.5. object to processing based on legitimate interests and object at any time to processing for direct marketing purposes;
12.2.6. receive certain personal data in a structured, commonly used, and machine-readable format and, where applicable, have it transmitted to another controller;
12.2.7. withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
12.2.8. lodge a complaint with a competent data protection or supervisory authority.
12.3. These rights are not absolute and may be subject to conditions, exemptions, verification requirements, and limitations under applicable law. In certain circumstances, We may continue processing personal data notwithstanding a request, including where processing is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.
12.4. Where an image uploaded by a User depicts another individual, We process that image on the User’s instructions as described in Section 2. We will provide any additional information or notice to depicted individuals required by applicable data protection law, subject to applicable exceptions, including where providing individual notice would be impossible or involve disproportionate effort, in particular because We do not identify individuals in images.
12.5. You may exercise Your applicable rights using the methods described in Section 7. We may request information reasonably necessary to verify Your identity, authority, or the personal information to which the request relates.
12.6. Where We are required by applicable law to appoint a data protection representative or Data Protection Officer, the applicable contact information will be made available in this Privacy Policy or through the Website.
13. Third-Party Websites and Services
13.1. The Services may rely on, interact with, or provide links to third-party websites, platforms, and services, including payment providers, image-processing providers, and other service providers.
13.2. Third parties acting independently may collect, use, retain, disclose, or otherwise process personal information under their own terms, privacy policies, and legal obligations. Except where applicable law provides otherwise, We are not responsible for the independent privacy practices of such third parties.
13.3. If You follow a link from the Services to a third-party website, platform, or service, or share an Output to a third-party platform, Your interaction with that third party is governed by its own terms and privacy practices. We encourage You to review the applicable privacy information before providing personal information directly to a third party.
13.4. Nothing in this Section limits any responsibility or obligation that We have under applicable data protection law with respect to Our own collection, use, disclosure, or other processing of personal information, including processing performed by service providers on Our behalf.
14. Changes to this Privacy Policy
14.1. We may update this Privacy Policy from time to time to reflect changes to the Services, Our data-processing practices, legal or regulatory requirements, or for other legitimate business reasons.
14.2. When We update this Privacy Policy, We will revise the “Last Updated” date displayed at the beginning of the Policy.
14.3. Where required by applicable law, or where We make material changes that significantly affect how We process personal information, We will provide additional notice through the Website, Platform, email, or another appropriate method.
14.4. Where applicable law requires Your consent to a new or materially different processing activity, We will obtain that consent before relying on the relevant processing.
15. Contact Information
If You have questions, concerns, or complaints regarding this Privacy Policy or Our processing of personal information, or if You wish to exercise an applicable privacy right, You may contact Us using the details below:
Support Email: [email protected]
Platform Operator: Chatonline LLC, 3500 South DuPont Hwy, Dover 19901, Delaware, United States of America
When contacting Us regarding a privacy request, please provide sufficient information for Us to understand and process Your request. We may request additional information where reasonably necessary to verify Your identity, authority, or the personal information to which the request relates.
Please do not send passwords, full payment-card details, government identification documents, or other sensitive information unless We specifically request such information through an appropriate method where reasonably necessary to process Your request.