Privacy Policy

Tool inputs and outputs.

• For background removal and enhancement, PicDo AI processes the image you upload, its filename, file type, size, and the resulting image.
• For image generation, PicDo AI processes your text prompt, sends it to CREEM for required content-safety screening, and processes the generated image only after the prompt is allowed.
• PicDo AI accepts JPG, PNG, and WebP uploads up to 10 MB for current upload-based tools.

Security and quota data.

• Your IP address is used to enforce upload limits, a shared daily task allowance, and abuse protection. PicDo AI stores a one-way SHA-256 hash rather than the original IP address in its quota data.
• Cloudflare may process the original IP address and request metadata as part of hosting, network security, logs, and Turnstile bot verification.

Anonymous product events.

PicDo AI stores an anonymous random session ID in your browser's session storage. It may be sent with the page path, selected tool, task ID, and events such as editor viewed, image selected, task submitted, task completed, download clicked, or editor error. PicDo AI does not use this ID for cross-site tracking.

Account and billing data.

If you create an account or purchase a plan, PicDo AI processes your email address, internal account identifier, credit balance, Creem customer and subscription identifiers, plan, subscription status, transaction identifiers, and billing-event records. Creem processes checkout, tax, receipts, and payment credentials under its own privacy terms. PicDo AI does not store complete payment-card details.

• To perform the image edit or generation you request.
• To return, display, and let you download the result.
• To prevent abuse, enforce limits, and protect the service.
• To diagnose failures and improve the current tool workflows.
• To comply with applicable legal and security obligations.
• To provide accounts, paid credits, billing support, and refunds.

Depending on where you live, these purposes may correspond to providing the service you requested, PicDo AI's legitimate interests in operating and securing the service, or compliance with law.

PicDo AI runs on Cloudflare. Current processing may use Cloudflare Workers, R2, D1, Queues, Images, Workers AI, Turnstile, and platform observability. Uploaded images may be processed by Cloudflare Images; generation prompts and outputs may be processed by Cloudflare Workers AI.

Cloudflare describes customer prompts and outputs as customer content and states that it does not use that content to train Workers AI models or improve its services without explicit consent. Learn more in Cloudflare's Workers AI data usage documentation, Turnstile validation documentation, and privacy policy.

Creem processes paid checkout, subscriptions, taxes, payment receipts, refunds, and payment-related fraud prevention. Information is shared with Creem only as needed to provide those services.

CREEM also processes every user-supplied image-generation prompt through its Content Moderation API before generation. PicDo AI sends the prompt and a request identifier, then uses the returned allow, flag, or deny decision to block unsafe or unscreened generation. Background removal and image upscaling do not send a text prompt for this screening.

• Images: uploaded originals and generated results are stored in a private R2 bucket with lifecycle rules configured to expire them after one day. Cloudflare says removal typically occurs within 24 hours after the expiration time, although it can take longer.
• Task records: task IDs, file references, operation, status, and timestamps are deleted after two days. Generation prompts are passed to the processing queue and are not stored in PicDo AI's task database.
• Quota and abuse records: short upload windows are removed after one day; daily usage rows are removed after no more than eight days.
• Anonymous product events: server-side event rows are deleted after 90 days. The browser session ID remains in session storage until the browser session or tab is closed, subject to browser behavior.
• Account and billing records: retained while your account or subscription is active and afterward as reasonably needed for transaction records, refunds, disputes, fraud prevention, tax, accounting, and other legal obligations.

Cloudflare may retain separate security, network, or observability records under its own settings and policies. The R2 lifecycle behavior is documented in Cloudflare's object lifecycle documentation.

PicDo AI does not sell personal information and does not share it for cross-context behavioral advertising. Information may be processed by Cloudflare to operate the service and by Creem to process payments, disclosed when required by law, or used to investigate abuse and protect users, PicDo AI, or others.

PicDo AI limits file access to same-origin application routes, serves file responses with private no-store caching instructions, validates accepted upload types and sizes, uses Turnstile, and automatically expires stored files. No online service can guarantee absolute security, so do not upload images or prompts that you cannot risk disclosing.

Do not submit an image or prompt if you do not want PicDo AI and Cloudflare to process it. Download any result you want to keep before the automatic deletion window. You can end the anonymous browser session by closing the tab or clearing site data.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing. PicDo AI avoids storing the original IP address in its application database, so it may not be possible to connect an anonymous record to you. Transaction records may need to be retained when required by law.

PicDo AI is not directed to children. A parent or legal guardian should supervise use by anyone who cannot legally agree to these terms. Do not upload an image of a child unless you have the authority and consent required by applicable law.

Cloudflare operates a global network. Your information may therefore be processed in countries other than the one where you live, subject to Cloudflare's contractual, legal, and security safeguards.

PicDo AI may update this policy as the beta, providers, or legal requirements change. Material changes will be reflected by a new date at the top of this page. Review this page before using new paid, account, or data-intensive features if they are introduced.

For privacy, billing, or account questions, contact support@picdo.ai.