Privacy Policy
1. The short version
- We never use your images to train AI models.
- Uploaded and generated images are deleted from our servers within 30 days; you can delete them instantly anytime.
- We collect the minimum we need: your email, your images while processing them, and basic usage analytics.
- We never sell your data.
2. What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address | Account, waitlist, launch notification, receipts | Until you delete your account / unsubscribe |
| Uploaded images & generated results | Providing the editing service | Max 30 days, or until you delete them |
| Edit instructions & annotations | Running your edits; improving prompt quality (aggregated, not tied to your images) | 12 months |
| Payment status | Managing your subscription | Handled by our payment provider; we never see card numbers |
| Basic analytics (pages, device type) | Understanding what to improve | 14 months, aggregated |
3. Who we share data with
- AI model providers (e.g., OpenAI, Google): your image and instruction are sent to generate your edit, under their API data-usage terms (API inputs are not used to train their models).
- Payment provider (Merchant of Record, e.g., Paddle or Creem): processes checkout, taxes, and invoices. They handle card data; we never receive it.
- Hosting and storage providers: store images and run the service.
- No one else. We do not sell or rent personal data, ever.
4. Cookies
We use only essential cookies (login session, language preference). No advertising trackers, no third-party ad cookies.
5. Your rights
Wherever you live, we extend the same rights: access, correction, export, and deletion of your personal data. Email hello@circledit.com and we will respond within 30 days. If you are in the EU/EEA or UK, these are your GDPR rights; deleting your account removes all personal data except records we must keep for tax/legal reasons.
6. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is restricted and logged. No system is perfectly secure; if a breach affects your data, we will notify you without undue delay.
7. Children
The Service is not directed at children under 16, and we do not knowingly collect their data.
8. Changes
We may update this policy. Material changes will be announced by email or in the Service at least 14 days in advance.
9. Contact
Privacy questions: hello@circledit.com