Skip to main content

Privacy Policy

Last updated: July 28, 2026

This Privacy Policy explains how PictoFlex AI ("PictoFlex," "we," "us," or "our") processes information when you access or use pictoflex.com and related services (collectively, the "Service").

1. Scope

This Policy applies to information processed through the Service, including account creation, image generation and editing, support requests, purchases, and use of our website.

2. Information We Process

Depending on how you use the Service, we may process:

  1. Account and authentication information, such as your name, email address, profile image, authentication identifiers, language, and account preferences.
  2. Service and device information, such as feature usage, session events, timestamps, IP address, browser and device information, visitor identifiers, and anti-abuse signals.
  3. AI request information, such as prompts, style selections, reference images, generation parameters, and information needed to process and deliver a result.
  4. Transaction information, such as subscription and payment status, plan identifiers, credit usage, and billing metadata supplied by payment providers. We do not store complete payment card numbers.
  5. Support information, such as the name, email address, messages, and attachments you provide when contacting support.
  6. Cookie and similar technology information, including information needed for login, preferences, security, Google Analytics, and Google AdSense.

3. How We Use Information

We use information to:

  1. Provide, maintain, and protect the Service.
  2. Authenticate users, manage accounts, and process payments, subscriptions, and credits.
  3. Process image generation or editing requests and deliver results.
  4. Prevent abuse, fraud, security risks, and violations of our Content Policy.
  5. Respond to support requests and send necessary service notices.
  6. Understand aggregated, non-content operational activity to maintain security, reliability, and cost controls.
  7. Display advertising and measure website visits and use.

4. AI Content Handling

Your prompts, reference images, and generated outputs are used only to complete your request, protect the Service, and address necessary troubleshooting.

PictoFlex does not use your prompts, reference images, or generated outputs to train AI models, improve products, publicly display content, or market the Service.

To complete a generation or editing request, we may transmit the content necessary for that request to the applicable third-party model provider. That provider may process the received information under its applicable terms and privacy practices. We do not separately provide your AI content to a provider for the purposes listed above.

5. Temporary Reference Image Handling

Most model providers support data_url delivery. For those requests, a reference image is sent directly as image/base64 data and is not stored on PictoFlex servers.

When a model provider requires a reference image URL, we temporarily store the image in Cloudflare R2 only to complete that request. The R2 lifecycle policy automatically deletes those temporary files after 24 hours.

6. When We Share Information

We may disclose necessary information to service providers that help us provide the Service, including:

  1. AI model providers that process a request for your selected model.
  2. Providers of cloud storage, authentication, security, email, and infrastructure services.
  3. Payment providers that process payments, subscriptions, and billing.
  4. Google Analytics and Google AdSense for website analytics and advertising.

We may also disclose information when required by law; to protect users, the Service, or our rights; to enforce our Terms and policies; or in connection with a reorganization, merger, or asset transfer.

Service providers process information only as needed to provide their services and may be subject to their own terms and privacy policies.

7. Retention and Account Deletion

We retain information only for as long as needed to provide and protect the Service, meet applicable obligations, and handle necessary operational matters.

When you delete your account, we delete your account and associated user content through our deletion process.

8. Security

We use reasonable technical and organizational measures to protect information. No internet transmission or electronic storage method can be guaranteed to be completely secure.

9. Cookies, Advertising, and Your Choices

We use cookies and similar technologies to support login, preferences, and security, and we use Google Analytics and Google AdSense to measure website use and display advertising. Google and its advertising technology partners may place or read cookies, use web beacons, and process IP addresses, device identifiers, browser information, and usage information for purposes such as ad delivery, measurement, personalization, security, and fraud prevention. Learn more about how Google uses information from sites that use its services.

Where required in the European Economic Area, the United Kingdom, or Switzerland, Google's consent management platform asks whether you consent to advertising-related purposes and vendors before personalized advertising is enabled. Depending on your choices and applicable requirements, Google may serve personalized, non-personalized, or limited ads.

You may manage some account information or delete your account in account settings. You may also control cookies through your browser settings, use the "Cookie preferences" link in the site footer to review or change an applicable consent choice, and manage Google analytics and advertising preferences through Google Ads Settings. Limiting certain cookies may affect parts of the Service or your advertising experience. For assistance, contact [email protected].

10. Access, Correction, and Deletion Requests

Where applicable law provides these rights, you may request access to, correction of, or deletion of information we hold about you by contacting [email protected]. To protect account security, we may need to verify your identity before acting on a request and may limit or decline a request where permitted by applicable law.

11. Adults Only

The Service is for users who are at least 18 years old. We do not provide the Service to people under 18.

12. International Processing

Information may be processed in countries or regions other than the one where you live in order to provide the Service.

13. Changes and Contact

We may update this Policy from time to time and will update the "Last updated" date on this page. Continued use of the Service after an update means you accept the updated Policy to the extent permitted by applicable law.

For questions about this Privacy Policy, contact [email protected].