PngText
Back to home

Privacy Policy

How pngtext.com collects, uses, shares, and protects personal data, including prompts and uploaded images processed by AI models.

Last updated: 2026-11-12

Last updated: November 12, 2026

This Privacy Policy explains how pngtext.com ("pngtext", "we", "us", or "our") collects, uses, shares, and protects personal data when you use our website and services. It applies to every visitor and account holder.

1. Who We Are

pngtext operates a browser-based AI image generation and editing service at https://pngtext.com. For any question about this Policy or your personal data, contact us at support@pngtext.com.

2. Information We Collect

Information you give us

  • Account data — your email address, display name, hashed password or third-party sign-in identifier, preferred language, and account creation date.
  • Prompts and instructions — the text descriptions and editing instructions you submit.
  • Uploaded images — photographs and other files you send to the service for editing, upscaling, restoration, or background removal.
  • Generated images — the images the service produces for you, together with the settings used.
  • Support requests — the content of your messages to us, including any attachments.
  • Payment data — handled by our payment provider. We receive a transaction identifier, amount, currency, tax amount, and limited billing details, but we never store full card numbers, CVV codes, or bank credentials.

Information we collect automatically

  • Usage data — features used, generation counts, model selected, timestamps, and error events.
  • Device and technical data — browser type and version, operating system, device class, screen size, language, and IP address.
  • Cookies and similar technologies — described in Section 8.

3. How We Use Your Information

We use personal data to:

  • Provide the service, including generating and delivering the images you request.
  • Operate credits, billing, invoices, and entitlements.
  • Screen prompts and outputs against our content standards (see the Acceptable Use Policy).
  • Detect, investigate, and prevent fraud, abuse, and violations of our terms.
  • Respond to support requests, reports, and appeals.
  • Send service messages, such as receipts, security alerts, and material changes to our terms.
  • Maintain, debug, and improve the service, and measure aggregate usage trends.
  • Comply with legal, tax, and payment-network obligations.

We do not use your prompts or uploaded images to train our own models, and we do not sell personal data.

Legal bases (EEA, UK, Switzerland). Where the GDPR or equivalent law applies, we rely on: performance of a contract (delivering the service you requested), legitimate interests (security, abuse prevention, service improvement, and enforcing our terms), consent (where we ask for it, such as non-essential cookies), and legal obligation (tax, accounting, and lawful requests from authorities).

4. Prompts and Images Sent to Third-Party AI Models

AI generation and editing run on third-party image models. To produce the result you request, your prompt and the image you upload are transmitted to our model provider and then to the underlying model, which processes them to return an image. Output is transmitted back to you through our service.

These transfers are made only to perform the request you initiated. Our model provider is contractually restricted from using your inputs to train models, and from disclosing them except as required to deliver the service or comply with law. You can read the model-provider relationships described in Section 5.

If you upload an image containing another person, you confirm that you hold permission from that person, as described in Section 2.4 of the Acceptable Use Policy.

5. Sharing and Third Parties

We do not sell personal data. We share it only in these cases:

  • Payment processing. Our payment provider acts as the merchant of record for paid transactions, collects payment, calculates and remits applicable sales tax or VAT, issues invoices, and handles refunds and chargebacks. It receives your email address, transaction amount, currency, billing country, and tax details. We use Waffo Pancake for this purpose.
  • AI model providers. Prompts and images are sent to the model provider solely to fulfill your request, as described in Section 4.
  • Moderation and safety. Inputs and outputs may be screened by automated moderation services, including the Waffo Prompt Sift moderation API, to enforce our content standards.
  • Hosting and infrastructure. Our site and data are hosted on cloud infrastructure providers, including content delivery and database services, under data-processing agreements.
  • Email delivery. Transactional email is sent through a third-party email provider.
  • Analytics. Aggregate, non-identifying usage statistics help us understand how the service is used.
  • Legal and safety. We may disclose data where required by law, court order, or a lawful request from a public authority; to enforce our Terms or Acceptable Use Policy; to protect the rights, property, or safety of pngtext, our users, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.
  • Business transfers. If we are acquired or merge with another entity, personal data may transfer as part of that transaction, subject to this Policy.

We require processors to protect personal data and to use it only for the purposes we specify.

6. International Data Transfers

We and our processors may store and process data in countries other than yours, including the United States, the European Union, Singapore, and Japan. Where data originating in the EEA, UK, or Switzerland is transferred outside those regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or a recognized adequacy decision. You may request a copy of the relevant safeguard by contacting support@pngtext.com.

7. Data Retention

  • Account data is kept while your account is active and for up to 90 days after closure, so that the account can be restored and disputes resolved.
  • Generated images are kept in your account until you delete them or close your account, after which they are removed from active storage within 30 days.
  • Prompts and uploaded images are retained only as long as needed to deliver the result and maintain your history, then deleted or de-identified.
  • Transaction and invoice records are kept for the period required by tax and accounting law, typically 6 to 10 years.
  • Moderation and abuse records are kept for up to 2 years to detect repeat violations and to respond to lawful requests.
  • Server logs are kept for up to 90 days.
  • Support correspondence is kept for up to 3 years.
  • Where a legal hold, investigation, or unresolved dispute applies, we retain the relevant data until it is resolved.

8. Cookies and Similar Technologies

We use:

  • Strictly necessary cookies — to keep you signed in, protect against cross-site request forgery, and remember your language preference. These are required for the service to work.
  • Preference storage — local storage for interface settings such as theme and recent tool selections.
  • Analytics cookies (where enabled) — to measure aggregate traffic and feature usage. Where required, these are set only with your consent, which you can withdraw at any time.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will prevent sign-in and checkout from working.

9. Security

We use encryption in transit (HTTPS), hashed credentials, access controls limiting who can reach production data, and regular review of our infrastructure. No method of transmission or storage is completely secure, but we work continuously to protect your data. If a breach affects your personal data, we will notify you and the relevant authority where legally required.

10. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data, subject to legal retention obligations.
  • Export your data in a portable format.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Opt out of sale or sharing of personal data for cross-context behavioral advertising — we do not sell or share personal data in this way.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@pngtext.com. We respond within 30 days and may ask you to verify your identity before acting. Exercising your rights will not result in discriminatory treatment.

California residents. We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. You may still exercise your rights to know, delete, correct, and opt out by contacting us at the address above.

11. Children

pngtext is not directed to children. You must be at least 16 years old, or the age of digital consent in your jurisdiction if higher, to hold an account. We do not knowingly collect personal data from anyone below that age. If you believe a child has provided us with personal data, contact support@pngtext.com and we will delete it promptly.

12. Automated Processing

We use automated systems to screen prompts and images for prohibited content. These systems may block a request without a human reviewing it first. Automated decisions do not produce legal effects concerning you beyond the refusal of a specific generation request or the enforcement steps described in the Acceptable Use Policy. You can request human review of an enforcement decision by writing to support@pngtext.com.

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

13. Third-Party Links

The service may link to third-party websites. We are not responsible for their privacy practices. Review their policies before providing personal data.

14. Changes to This Policy

We may update this Policy from time to time. Material changes are announced on this page at least 15 days before they take effect, and the date at the top is updated. Where required, we will also notify you by email or in the service.

15. Contact Us

We aim to reply to privacy enquiries within 3 business days, and to fulfill verified rights requests within 30 days.