Privacy Policy

1. Overview

This Privacy Policy explains how Edytro (“Edytro,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit edytro.com, create an account, use our AI image editing tools, contact support, or otherwise use our services (collectively, the “Service”).

Edytro is an online AI image editor. Depending on the features available to you, the Service may let you upload a photo, describe an edit in natural language, select an AI model or output option, receive an edited image, manage credits or subscriptions, use an API key, and contact our support team.

For privacy questions or requests, contact us at support@edytro.com. This policy was last updated on September 18, 2026.

2. Information We Collect

We collect information that you provide, information generated when you use the Service, and information received from service providers or other sources.

Account and authentication information

When you create or use an account, we may collect your name, email address, profile image, preferred language or locale, account credentials and authentication records, email-verification status, and information provided by a connected sign-in provider such as Google or GitHub when that option is enabled.

Prompts, uploads, and generated content

When you use an AI feature, we may process the images, prompts, edit instructions, model selections, aspect-ratio or enhancement settings, generated images, and related file metadata that you submit or receive. Images can contain personal information, including faces, voices, documents, locations, or other sensitive details. Please do not upload information you do not have the right to use or information that you do not want processed by the Service and its required providers.

Usage, credit, and billing information

We may collect information about AI tasks, models, providers, generation status, credits used, plan or subscription status, orders, payment type, currency, transaction identifiers, invoice information, and related customer-service records. Payment card numbers and other full payment credentials are handled by the payment provider shown at checkout; we do not intend to store full card numbers on our own servers.

API and support information

If you use an API key or submit a support ticket, we may collect API-key metadata, request and usage records, the subject and content of your ticket, replies, and attachments you choose to send.

Device, log, and cookie information

When you visit or use the Service, we may automatically receive your IP address, browser and device type, operating system, user-agent information, language or locale, referring URL, campaign or UTM information, timestamps, session identifiers, and security or error logs. We use cookies, local storage, and similar technologies for authentication, security, language and interface preferences, analytics, advertising, and support tools, as described below.

Information from third parties

We may receive information from authentication providers, payment providers, cloud storage providers, AI model providers, analytics providers, advertising providers, and customer-support platforms that are connected to the Service. Their information practices are governed by their own privacy notices.

3. How We Use Information

We use information for the following purposes:

• To provide, operate, maintain, and secure the Service, including authentication, file handling, AI processing, downloads, credits, subscriptions, and API access.
• To send prompts, images, and required task information to the AI, cloud-storage, hosting, and other providers needed to fulfill your request.
• To process purchases, subscriptions, renewals, cancellations, refunds where applicable, invoices, and fraud-prevention checks.
• To provide customer support, respond to requests, and communicate about account, security, billing, and service issues.
• To monitor performance, debug errors, prevent abuse, enforce our Terms of Service, and protect users, the Service, and our rights.
• To understand usage and improve features, reliability, and the user experience.
• To send product or marketing communications where permitted by law. You can opt out of non-essential marketing communications by using the unsubscribe option or contacting us.
• To comply with legal obligations, resolve disputes, and respond to lawful requests.

We do not use AI-generated images to make decisions about your eligibility for housing, employment, credit, insurance, education, healthcare, or other matters that produce legal or similarly significant effects.

4. AI Processing and Your Content

Edytro uses third-party infrastructure and AI model providers to process requests. The providers used for a particular feature may change and may include providers for AI inference, cloud storage, hosting, email, payments, analytics, and support. We send only the information reasonably needed to provide the feature, subject to the configuration and terms applicable to that provider.

You retain your rights in images, prompts, and other material that you submit (“Your Content”). You are responsible for ensuring that you have all permissions required to upload and process Your Content, including permission from people depicted in an image where required. Do not upload confidential, regulated, or highly sensitive information unless you have assessed the risks and have a lawful reason to do so.

Edytro does not intentionally use Your Content to train a general-purpose model operated by Edytro unless we clearly disclose that use and have an appropriate lawful basis. Third-party providers may have their own data-handling policies, so you should review the applicable provider terms before using a feature that sends content to them.

5. How We Share Information

We may disclose information in the following circumstances:

• Service providers. To vendors that host databases or files, run AI inference, process payments, send email, provide authentication, measure analytics, serve advertising, or operate customer support. These providers may process information only as needed to provide services to us, subject to their agreements and applicable law.
• At your direction. When you choose to connect a provider, use an integration, publish or share a result, or otherwise instruct us to disclose information.
• Legal and safety reasons. When reasonably necessary to comply with law, court orders, legal process, or government requests, or to detect fraud, security incidents, abuse, or threats to people or property.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to applicable confidentiality and privacy requirements.
• With your consent. When you authorize a disclosure for another purpose.

We do not sell personal information for money in the ordinary sense. If optional analytics, advertising, or similar technologies are enabled and applicable law treats their use as “sale” or “sharing,” we will provide the controls and disclosures required by that law.

6. Cookies and Similar Technologies

We use the following categories of cookies or similar technologies:

• Essential technologies for sign-in, sessions, security, locale selection, fraud prevention, and core functionality.
• Preference technologies for settings such as theme, language, and interface state.
• Analytics technologies such as Google Analytics, Plausible, or Umami, if enabled for the Service.
• Advertising technologies such as Google AdSense, if enabled.
• Support technologies such as Crisp or Tawk.to, if enabled.

You can manage cookies through your browser and, where available, the controls provided by the Service. Blocking essential cookies may prevent sign-in or other features from working. Information collected by third-party technologies is also subject to the relevant provider’s privacy policy.

7. Legal Bases Where Applicable

If data-protection law such as the GDPR or UK GDPR applies, we generally rely on the following legal bases:

• Performance of a contract to create and maintain your account, provide the Service, process transactions, and respond to support requests.
• Legitimate interests to secure and improve the Service, prevent abuse, administer the business, and communicate about service changes, provided those interests do not override your rights.
• Consent for optional analytics, advertising, marketing, or other processing where consent is required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
• Legal obligations when we must retain or disclose information to comply with law.

8. Retention

We keep information only for as long as reasonably necessary for the purposes described in this policy, including:

• Account and profile information while your account is active and for a reasonable period after closure.
• Prompts, uploads, generated files, task records, and API or usage records for as long as needed to provide the relevant feature, maintain account history, investigate abuse, or resolve disputes. Available deletion controls or a written deletion request may remove eligible content sooner.
• Payment, order, subscription, tax, and accounting records for the period required by law or needed to protect our legal and financial interests.
• Security, error, and backup records for the period needed for security, reliability, and disaster recovery, after which they are deleted or de-identified where reasonably possible.

When information is no longer needed, we delete it, anonymize it, or securely isolate it unless a longer retention period is required or permitted by law.

9. International Transfers

Edytro and the providers used to operate the Service may process information in countries other than the country where you live. Those countries may have different data-protection rules. Where required, we use appropriate safeguards for international transfers, such as contractual protections or another legally recognized transfer mechanism.

10. Security

We use reasonable technical and organizational measures intended to protect information, including access controls, encrypted connections, provider safeguards, and monitoring for abuse or security incidents. No internet transmission or storage system is completely secure. You are responsible for protecting your password, API keys, and devices, and for contacting us promptly if you believe an account or key has been compromised.

11. Your Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to access, correct, delete, export, or restrict the use of your personal information; object to certain processing; withdraw consent; and complain to a data-protection authority.

If you are a California resident, applicable law may give you rights to know or access the categories and specific pieces of personal information collected about you, request deletion or correction, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information, and receive equal service without unlawful discrimination. We do not knowingly sell personal information for money. These rights and any available exemptions are determined by applicable law.

To exercise a right, email support@edytro.com with the subject “Privacy Request” and describe what you are requesting. We may need to verify your identity and may ask for information associated with your account. We will respond within the time required by applicable law. You do not need to provide your password or an API secret in a request.

12. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If the law where you live sets a higher minimum age for online services or requires parental consent, that rule applies. If you believe a child has provided us with personal information, contact us so we can review and take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy when the Service, providers, or legal requirements change. We will post the revised version on this page, update the “Last updated” date, and provide additional notice for material changes where required by law.

14. Contact Us

For questions, privacy requests, or concerns about this policy, contact:

Edytro

support@edytro.com

https://edytro.com