Privacy Policy

How Open AI Image handles your account information, creative content and service usage.

Nov 2, 2026

This Privacy Policy explains how Open AI Image (“we”, “us” or “our”) handles information when you visit openaiimage.com, create an account, use our AI creation tools, make a purchase or contact support. It applies to the service we operate, including its website and account workspace. It does not replace the privacy notices of a payment provider or another service you choose to visit separately.

Information you provide

Account information. We process the email address, name and profile information you provide when registering or signing in. If you use a supported third-party login, we receive the profile and authentication information that provider shares with your authorization. Password authentication is handled through our authentication system; never send your password to support.

Creative content. We process prompts, reference images, videos, audio, selected settings and generated results to provide the tools you request. A file you upload can contain personal information about you or someone else. Upload only material you have the right to use, and avoid including information that is unnecessary for your creation.

Purchases and support. We keep order identifiers, the selected product, payment status, amounts, currency and relevant billing details returned by the payment provider. Payment credentials are entered with the provider; we do not need your full card number or security code to provide support. Support requests can include your messages, attachments and the order or task identifiers you supply.

Information collected during use

We receive technical information needed to operate and protect the service, such as request time, IP address, browser or device information, session identifiers, error records and task status. We also maintain credit transactions, subscription history and generation records so that balances, access and results can be reconciled correctly.

Where a guest experience is available, a browser session and related service identifiers help maintain its balance, task history and checkout progress. Guest activity may not remain recoverable if browser data is removed or the session expires. Signing in does not give someone access to another person's purchases merely because they type the same email address.

Analytics can record pages viewed, broad referral information and interactions with the service. The particular analytics or advertising features available on the site depend on the tools enabled at the time. Where a feature requires consent, the relevant preference controls govern its use.

How we use information

  • Create and authenticate accounts, maintain sessions and provide account settings.
  • Process generation requests, retrieve results and make your saved assets available to you.
  • Calculate credit charges, fulfill purchases, manage subscriptions and handle eligible refunds.
  • Detect fraud, automated abuse, prohibited content, security incidents and unauthorized access.
  • Diagnose errors, measure service performance and improve usability.
  • Answer support requests, communicate material service changes and meet applicable legal obligations.

Where data protection law requires a legal basis, the basis depends on the purpose: performing the service you requested, complying with legal obligations, protecting legitimate interests such as security and fraud prevention, or your consent where required. Optional marketing is separate from messages necessary to administer your account or purchase.

AI processing and service providers

To generate an output, we may send the relevant prompt, reference files and settings to the selected model's provider or an intermediary that delivers that model. Hosting, storage, authentication, email, payment, security and analytics providers may also process information needed to perform their role. The data needed for one generation can differ from the data needed for a payment or login.

Provider processing, retention and model-use practices can differ. Do not assume that every model has identical confidentiality or training terms. Do not submit sensitive personal information or confidential material unless you have confirmed that the selected workflow is suitable for it. Generated content is not automatically a reliable statement about any real person.

We may disclose information where required by law, to respond to a valid legal request, to protect the service or users, or in connection with a business transfer subject to applicable protections. We do not publish your private account details as part of ordinary generation. Content you deliberately share or publish can be visible to others according to that action.

Cookies and browser storage

Essential cookies and browser storage support sign-in, security, language preferences and continuity of the creative workflow. Additional tools may use storage for analytics or advertising when enabled and permitted. Blocking essential storage can prevent login, guest continuity or checkout from working correctly.

You can manage browser storage in your browser and use any consent controls displayed by the site. Deleting a local cookie does not by itself delete account records, invoices or files already stored on the service. To request deletion of those records, use the support process below.

Retention and security

We retain information for as long as reasonably needed for the purpose described here, including providing your account, delivering results, handling disputes, preventing abuse and meeting accounting or other legal obligations. Different records can have different retention periods. Files and generated outputs are not a substitute for your own backup; download important work rather than relying on indefinite storage.

We use access controls and technical safeguards appropriate to the service. No internet service can guarantee that every transmission, storage system or third-party integration is completely risk-free. Protect your login credentials, use a secure email account and tell support promptly if you suspect unauthorized access.

Your choices and requests

Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to certain processing, withdraw consent, or complain to the relevant supervisory authority. These rights can be subject to exceptions, including records needed for legal obligations, payment disputes or preventing fraud.

You can update available profile information in account settings and manage renewal in billing settings. For a privacy or deletion request, contact support and identify the account and the request. We may ask you to verify ownership before disclosing, changing or deleting information. Do not include passwords, full card details or unrelated sensitive documents.

Closing an account and canceling a subscription are different actions. If you want to stop future billing, cancel renewal as well. Some records may need to remain after deletion of an account, and a provider may have separate obligations for information it processes independently.

International processing and children

The service and its providers can process information in countries other than the country where you live. Where required, applicable transfer protections must be used. The service is intended for people able to lawfully use the tools and enter the applicable agreement; it is not directed to children. Contact support if you believe a child has provided personal information inappropriately.

Changes and contact

We may update this policy when the service, processing practices or legal requirements change. The date above identifies the current version. Material changes will be communicated through appropriate service notices where required. Questions about this policy can be submitted through support; include “Privacy” in the subject so the request can be directed appropriately.