Privacy Policy

1. Introduction

SC QWERTYBIT SRL (“we”, “us”, or “our”), of 16, Constantin Voda, Bucharest, RO, operates ICC Images. We are the data controller for the personal data described here. This policy explains what we collect, why, who else touches it, and what you can ask us to do about it.

The single most important thing in this document is section 3: some operations never leave your device and some necessarily do, and it is worth knowing which is which before you upload anything sensitive.

2. What we collect

• Account data. Your email address, and the basic profile information Google returns if you sign in with Google. We do not store passwords — sign-in is by Google or by a one-time code sent to your email.
• Billing data. Your purchase history, credit balance, subscription status and billing country. Card details are handled by Stripe and never reach our systems.
• Usage data. Which features you use and when, plus standard technical information such as browser type, approximate country and referring page.
• Images and prompts. Only where a feature requires it — see the next section.
• Anything you send us. Support messages, feedback and bug reports, including whatever you choose to put in them.

3. Your images: what stays local and what does not

Operations that run entirely in your browser. Recolouring, colour replacement, resizing, cropping, rotating, flipping, padding, borders, blur, shadows, grayscale, duotone, format conversion, palette extraction and the single-purpose tools on this website all run on your own device using your browser’s canvas. For these, the image is never uploaded, and we never see it.

Operations that transmit your image. The AI features cannot run locally. When you use AI background removal, object removal, image upscaling, AI logo generation, AI image generation or the AI image edit, your image is transmitted to us and on to the AI provider that performs the operation — Replicate in most cases, Google for the AI image edit. It is processed to produce your result and is not retained by us beyond the short period needed to deliver it back to you.

Image Color Changer in ChatGPT. The app we publish in ChatGPT recolours your image the same way, on your own device, and the image you open there is never sent to us. One action is an exception, and it is worth stating plainly: when you choose Download preview, the reduced preview the app has just produced — not your source image — is sent through our endpoint into a private storage bucket, so that ChatGPT can hand you a working download link. The link stops working after fifteen minutes, the file is deleted within twenty-four hours by an automated task, and it is never logged, published or passed to anyone else. The app also sends us three anonymous usage events — that the editor was opened, that a preview was exported, that someone continued to the web editor — carrying a random session identifier and approximate location, and no image, filename or file identifier.

We do not train on your images, and we do not licence, sell or otherwise pass them to anyone except the processors named in section 6 for the sole purpose of carrying out the operation you requested.

Work you keep in the application — open canvases, your asset gallery and edit history — is stored in your own browser’s storage on the device you are using. It is not synced to us and it is not visible to us. Clearing your browser data removes it.

4. Why we process it, and on what legal basis

• To provide the Service (performance of a contract). Running your account, carrying out the edits you request, tracking your credit balance, taking payment.
• To keep the Service working and safe (legitimate interests). Diagnosing faults, measuring which features are used, and preventing fraud and abuse of free allowances.
• To send product email (consent, or legitimate interests for service messages). Sign-in codes, receipts and account notices are sent because they are necessary. Marketing email is sent only where that is lawful, and every such message carries a working one-click unsubscribe link that takes effect immediately.
• To meet our obligations (legal obligation). Tax, accounting and VAT records.

5. How long we keep it

• Account data — for as long as your account exists, and deleted when you delete it.
• Images sent to an AI feature — retained only for as long as the operation and its delivery to you require, then deleted.
• Billing and invoice records — retained for the period Romanian tax law requires, which outlasts your account.
• A record that an email address has previously received a free allowance — kept after account deletion. It is the only thing that stops free allowances being farmed by deleting and re-registering, and it holds nothing beyond the address itself.
• A preview downloaded from the ChatGPT app — held in private storage for at most 24 hours and then deleted by an automated task that runs every hour. The link we give you for it stops working after fifteen minutes.
• Usage analytics — kept in aggregate; individual event records are retained for up to 24 months.

6. Who processes data on our behalf

We do not sell your personal data. We do use the following processors, each for the stated purpose and nothing else:

We may also disclose data where the law requires it, to establish or defend legal claims, or in connection with a merger or sale of the business — in which case this policy continues to apply to the data transferred.

7. International transfers

Several of the processors above are established in the United States, so some data leaves the European Economic Area. Those transfers are made under the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism, together with the safeguards each provider offers. You can ask us for details of the mechanism relied on for a particular provider.

8. Your rights

Under the GDPR and equivalent laws you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting what was lawful beforehand.

You can delete your account and its data yourself from your account settings. For anything else, write to hello@image-color-changer.com and we will respond within one month. If you think we have handled your data badly, please tell us first — but you also have the right to complain to your local data protection authority, which in Romania is the ANSPDCP.

9. Cookies and local storage

This marketing website sets no advertising or tracking cookies. Its traffic measurement is cookieless and does not identify you individually, which is why you are not asked to dismiss a consent banner here.

The web application stores your session and your working files in your browser’s own storage so that you stay signed in and do not lose work between visits. That storage is local to your device. The application also records product analytics tied to your account identifier, so that we can see which features are used.

10. Security

Data is transmitted over encrypted connections and access to production systems is restricted. Payment details never touch our infrastructure. No system is perfectly secure, and we do not claim otherwise; if a breach affects your data and is likely to present a risk to you, we will notify you and the relevant authority as the law requires.

11. Children

The Service is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has created an account, write to hello@image-color-changer.com and we will remove it.

12. Changes to this policy

We update this policy when what we do changes — notably when we add a feature that involves a new processor. The “Last updated” date at the top always reflects the current version, and material changes are notified by email or in the application before they take effect.

13. Contact

Questions about this policy, or any request about your data, go to hello@image-color-changer.com or through the support page. Our Terms of Service cover the rest of the relationship.