Privacy Policy
Last updated: April 27, 2026
This Privacy Policy explains how GPT Image 2 ("we", "us", or "our") collects, uses, stores, and shares information when you use our website and AI image generation services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account data – email address, name, and password when you register.
- Payment data – billing details processed securely by our payment providers; we do not store full card numbers.
- User content – text prompts, reference images, and other inputs you submit to generate images.
- Communications – messages you send us via email or contact forms.
1.2 Information Collected Automatically
- Usage data – pages visited, features used, generation history, and session duration.
- Device & log data – IP address, browser type, operating system, and referring URLs.
- Cookies & similar technologies – used for authentication, preferences, analytics, and security. See Section 6 for details.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Process transactions and send related notices.
- Authenticate users and maintain account security.
- Personalise your experience and surface relevant features.
- Respond to support requests and feedback.
- Send product updates, promotional offers, and newsletters (you may opt out at any time).
- Analyse usage trends to improve model performance and user experience.
- Comply with legal obligations and enforce our policies.
3. How We Share Your Information
We do not sell your personal data. We may share it in the following circumstances:
- Service providers – trusted third parties that perform functions on our behalf (hosting, payment processing, analytics, customer support), bound by confidentiality agreements.
- AI model providers – prompts and reference images may be transmitted to underlying AI providers (such as OpenAI) solely to generate your requested output.
- Legal requirements – if required by law, court order, or governmental authority.
- Business transfers – in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality commitments.
- With your consent – in any other cases where you have given explicit permission.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer. Generated images may be stored for a limited period to enable download history; you can delete them at any time from your account.
5. Data Security
We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or alteration, including TLS encryption in transit and encryption at rest for sensitive data. No method of transmission over the internet is 100% secure; while we strive to protect your information, we cannot guarantee absolute security.
6. Cookies
We use the following categories of cookies:
- Essential cookies – required for authentication and core Service functionality; cannot be disabled.
- Analytics cookies – help us understand how visitors use the Service (e.g. page views, session length). You can opt out via your browser settings or our cookie preferences panel.
- Preference cookies – remember your settings such as language and UI preferences.
You can control cookies through your browser settings. Disabling certain cookies may limit Service functionality.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access – request a copy of the data we hold about you.
- Rectification – request correction of inaccurate or incomplete data.
- Erasure – request deletion of your personal data.
- Restriction – request that we limit how we use your data.
- Portability – receive your data in a structured, machine-readable format.
- Objection – object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, contact us at support@gpt-images.com. We will respond within 30 days.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will promptly delete it. If you believe we have inadvertently collected information from a child, please contact us.
9. International Transfers
Your data may be transferred to and processed in countries other than your own. Where we transfer personal data outside the European Economic Area, we do so under appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top and, where appropriate, by sending an email or displaying a notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Email: support@gpt-images.com
- Contact form: gptimage-2.com/contact