Privacy Policy
Last updated:
1. Introduction
SC QWERTYBIT SRL (“we”, “us”, or “our”), of 16, Constantin Voda, Bucharest, RO, operates ICC Images. We are the data controller for the personal data described here. This policy explains what we collect, why, who else touches it, and what you can ask us to do about it.
The single most important thing in this document is section 3: some operations are processed entirely on your device and some necessarily send your image to a server, and — separately — signing in to the web app saves your work so you can return to it. It is worth knowing which is which before you upload anything sensitive.
2. What we collect
- Account data. Your email address, and the basic profile information Google returns if you sign in with Google. We do not store passwords — sign-in is by Google or by a one-time code sent to your email.
- Billing data. Your purchase history, credit balance, subscription status and billing country. Card details are handled by Stripe and never reach our systems.
- Usage data. Which features you use and when, plus standard technical information such as browser type, approximate country and referring page.
- Images and prompts. Only where a feature requires it — see the next section.
- Anything you send us. Support messages, feedback and bug reports, including whatever you choose to put in them.
3. Your images: what stays local and what does not
Operations that run entirely in your browser. Recolouring, colour replacement, resizing, cropping, rotating, flipping, padding, borders, blur, shadows, grayscale, duotone, format conversion, palette extraction and the single-purpose tools on this website all run on your own device using your browser’s canvas. The processingnever involves a server: your image is not uploaded in order to be edited, and we do not see it while you work.
Storing your work is a separate question from processing it, and the answer differs between the two places you can use these tools. The single-purpose tools on this website upload nothing at all — they run in the page, and if you continue into the web app the image is handed over inside your own browser. In the web app, if you are signed in and have left autosave on, your work is also saved to private storage that only your account can read, so you can come back to it later. Section 5 says for how long.
Operations that transmit your image. The AI features cannot run locally. When you use AI background removal, object removal, image upscaling, AI logo generation, AI image generation or the AI image edit, your image is transmitted to us and on to the AI provider that performs the operation — Replicate in most cases, Google for the AI image edit. It is processed to produce your result and is not retained by us beyond the short period needed to deliver it back to you.
Image Color Changer in ChatGPT. The app we publish in ChatGPT recolours your image the same way, on your own device, and the image you open there is never sent to us. One action is an exception, and it is worth stating plainly: when you choose Download preview, the reduced preview the app has just produced — not your source image — is sent through our endpoint into a private storage bucket, so that ChatGPT can hand you a working download link. The link stops working after fifteen minutes, the file is deleted within twenty-four hours by an automated task, and it is never logged, published or passed to anyone else. The app also sends us three anonymous usage events — that the editor was opened, that a preview was exported, that someone continued to the web editor — carrying a random session identifier and approximate location, and no image, filename or file identifier.
We do not train on your images, and we do not licence, sell or otherwise pass them to anyone except the processors named in section 6 for the sole purpose of carrying out the operation you requested.
Work you keep in the application. If you are not signed in, your open canvases, asset gallery and edit history are stored in your own browser’s storage on the device you are using. Nothing is uploaded, it is not visible to us, and clearing your browser data removes it.
If you are signed in, the editor additionally autosaves your projects — the image you opened, the current result, and the settings that produced it — to a private storage area that only your own account can read, so that you can come back to them later or on another device. We do not look at them, they are never shared, sold, published, or used to train any model, and they are deleted automatically on the schedule in section 5. You can turn autosave off at any time with the cloud icon next to the Download button, and you can delete any saved project yourself from the editor.
One part of the editor is treated differently, and it works in your favour: the multi-tab Canvas is backed up only on a subscription. On a free account or after a one-time credit pack, Canvas tabs are saved in your own browser and are never uploaded at all — so less of your work leaves your device, not more. The cloud icon in the editor always states which of the two is in force for what you have open.
4. Why we process it, and on what legal basis
- To provide the Service (performance of a contract). Running your account, carrying out the edits you request, tracking your credit balance, taking payment.
- To keep the Service working and safe (legitimate interests). Diagnosing faults, measuring which features are used, and preventing fraud and abuse of free allowances.
- To send product email (consent, or legitimate interests for service messages). Sign-in codes, receipts and account notices are sent because they are necessary. Marketing email is sent only where that is lawful, and every such message carries a working one-click unsubscribe link that takes effect immediately.
- To meet our obligations (legal obligation). Tax, accounting and VAT records.
5. How long we keep it
- Account data — for as long as your account exists, and deleted when you delete it.
- Images sent to an AI feature — retained only for as long as the operation and its delivery to you require, then deleted.
- Projects autosaved from the editor — held in private storage that only your own account can read. Kept for 24 hours on a free account, 30 days if you have bought a credit pack, and for as long as your subscription is active plus 30 days after you cancel, so you have time to download anything you want to keep. Each plan also carries a limit on how many projects are held at once; once you are at that limit, saving a new project deletes your oldest one. Deleted automatically by an hourly task when the period ends, immediately when you delete a project, and when you delete your account. Autosave can be switched off in the editor at any time, and Canvas tabs are only ever uploaded on a subscription (section 3).
- Billing and invoice records — retained for the period Romanian tax law requires, which outlasts your account.
- A record that an email address has previously received a free allowance — kept after account deletion. It is the only thing that stops free allowances being farmed by deleting and re-registering, and it holds nothing beyond the address itself.
- A preview downloaded from the ChatGPT app — held in private storage for at most 24 hours and then deleted by an automated task that runs every hour. The link we give you for it stops working after fifteen minutes.
- Usage analytics — kept in aggregate; individual event records are retained for up to 24 months.
6. Who processes data on our behalf
We do not sell your personal data. We do use the following processors, each for the stated purpose and nothing else:
| Processor | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Database, authentication, server functions, storage for autosaved editor projects, and short-lived storage for previews downloaded from the ChatGPT app | Account record, email address, credit balance, usage history; autosaved editor projects, readable only by your own account and deleted on the schedule in section 5; separately, a reduced preview image held for at most 24 hours | EU |
| Stripe | Payments, subscriptions and invoicing | Email address, billing country, payment details (handled by Stripe, never by us) | EU / US |
| Replicate | Runs the AI image models: background removal, object removal, upscaling, logo and image generation | The image or prompt you submit to one of those features | US |
| Google sign-in, and the model behind the AI image-edit feature | Your email address and basic profile on sign-in; the image you submit to that feature | EU / US | |
| Anthropic | The model behind the in-app assistant | The messages you type to the assistant and the context of the edit you are making | US |
| OpenAI | Colour suggestion and theme-analysis features, and the platform on which our ChatGPT app runs | Colour values and page text submitted to those features; in the ChatGPT app, your conversation and anything you attach to it are handled by OpenAI under its own privacy policy | US |
| Resend | Sign-in codes and product email | Email address, delivery and open status | EU / US |
| Vercel | Hosting for this website and for the ChatGPT app endpoint, and cookieless traffic analytics | Request metadata: IP address, page, referrer, approximate country | EU / US |
| Mixpanel | Product analytics inside the web application and plugins | Account identifier and which features were used | EU / US |
| Slack | Internal notifications when someone submits feedback, reports a problem, or uses the ChatGPT app | The content of your feedback and, where you provided it, your email address; for the ChatGPT app, a random session identifier and approximate location, never image data | US |
We may also disclose data where the law requires it, to establish or defend legal claims, or in connection with a merger or sale of the business — in which case this policy continues to apply to the data transferred.
7. International transfers
Several of the processors above are established in the United States, so some data leaves the European Economic Area. Those transfers are made under the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism, together with the safeguards each provider offers. You can ask us for details of the mechanism relied on for a particular provider.
8. Your rights
Under the GDPR and equivalent laws you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting what was lawful beforehand.
You can delete your account and its data yourself from your account settings. For anything else, write to hello@image-color-changer.com and we will respond within one month. If you think we have handled your data badly, please tell us first — but you also have the right to complain to your local data protection authority, which in Romania is the ANSPDCP.
9. Cookies and local storage
This marketing website sets no advertising or tracking cookies. Its traffic measurement is cookieless and does not identify you individually, which is why you are not asked to dismiss a consent banner here.
The web application stores your session and your working files in your browser’s own storage so that you stay signed in and do not lose work between visits. That storage is local to your device. If you are signed in and have left autosave on, your projects are additionally copied to private cloud storage as described in sections 3 and 5. The application also records product analytics tied to your account identifier, so that we can see which features are used.
10. Security
Data is transmitted over encrypted connections and access to production systems is restricted. Payment details never touch our infrastructure. No system is perfectly secure, and we do not claim otherwise; if a breach affects your data and is likely to present a risk to you, we will notify you and the relevant authority as the law requires.
11. Children
The Service is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has created an account, write to hello@image-color-changer.com and we will remove it.
12. Changes to this policy
We update this policy when what we do changes — notably when we add a feature that involves a new processor. The “Last updated” date at the top always reflects the current version, and material changes are notified by email or in the application before they take effect.
13. Contact
Questions about this policy, or any request about your data, go to hello@image-color-changer.com or through the support page. Our Terms of Service cover the rest of the relationship.
SC QWERTYBIT SRL16, Constantin Voda
Bucharest, RO