Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use our website, application, API, image and video generation tools, account features, billing flows, support channels, and related services (collectively, the "Service"). By using the Service, you acknowledge this Privacy Policy and our Terms of Service.

2. Data Controller

LOGICTECH PTE. LTD. is the data controller for personal data processed through the Service unless we state otherwise.

3. Information We Collect

We collect information you provide, information generated through your use of the Service, and information from service providers that help us operate the Service.

• Account information, such as email address, name, login method, and account settings.
• Billing and transaction information needed to process purchases, subscriptions, invoices, refunds, and fraud checks.
• Uploaded inputs, prompts, reference images, videos and audio, generated outputs, task metadata, and related support context when needed to provide the Service.
• When you connect ChatGPT, the account identifier and OAuth authorization records needed to link your account, the specific tool inputs you choose to send, and the profile, credit balance, generation status, and result links returned to ChatGPT.
• Usage Data, including IP address, browser type, device identifiers, pages visited, session events, timestamps, diagnostic logs, and security signals.
• Communications you send to us, including support requests, feedback, opt-out requests, and refund questions.

4. Cookies and Similar Technologies

We use cookies, local storage, pixels, analytics events, and similar technologies to operate login sessions, remember preferences, secure the Service, understand usage, measure performance, and improve product experience. You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.

5. How We Use Personal Data

• Provide, maintain, secure, and improve the Service.
• Create and manage accounts, credits, subscriptions, invoices, refunds, and API access.
• Route generation requests to selected AI model providers and infrastructure partners.
• Provide customer support, investigate bugs, prevent abuse, and enforce our Terms and Acceptable Use Policy.
• Send service notices, security alerts, billing updates, and, where permitted, product or marketing communications.
• Comply with legal obligations, resolve disputes, and protect the rights, safety, and integrity of users and the Service.

7. How We Share Personal Data

We do not sell personal data. We may disclose personal data only as described in this Privacy Policy or with your consent.

• OpenAI/ChatGPT when you connect the plugin, so ChatGPT can receive your account profile, credit balance, generation status, and result links and display them in your conversation.
• AI model providers and their infrastructure partners, which receive the prompts, selected reference media, outputs, and task details needed to process your generation request.
• Hosting, database, object storage, analytics, error monitoring, payment, email, fraud prevention, and customer support providers that help us operate the Service.
• Professional advisers, authorities, courts, or regulators where required by law or necessary to protect rights and safety.
• A successor entity if we are involved in a merger, acquisition, financing, reorganization, or asset transfer.

8. AI Model Providers and Generated Content

To provide image and video generation, editing, moderation, storage, and delivery, we may send prompts, uploaded references, generated outputs, task identifiers, and related metadata to selected third-party AI model providers and infrastructure partners. We use these providers to process requests, return results, monitor abuse, and maintain service reliability.

If you use the AI Image Editor plugin in ChatGPT, we receive only the inputs included in each tool call, such as your chosen model, prompt, settings, and any reference files or media URLs you attach for that request. We do not ask ChatGPT for your full conversation history. The plugin can check available models and your credit balance, quote costs, create image or video tasks using your existing credits, and check task status. The connected account profile tool can return your account ID, name, and email address to ChatGPT. When a task completes, we return its status and media links to ChatGPT so you can view the result.

9. Payments

Paid products, subscriptions, credit packs, invoices, refunds, and payment verification may be handled by third-party payment processors. We do not store full payment card numbers on our systems. Payment processors handle payment information under their own privacy and security practices.

10. Retention

Retention depends on the type of data and where it is stored:

• Temporary input files. New reference files uploaded to our staging storage, including files sent from ChatGPT, are configured to expire from active object storage seven days after upload. Other temporary uploads in our legacy temporary upload area have the same seven-day rule. A successful paid generation may copy an input into account storage; that copy follows the saved-content rule below.
• Temporary results. Newly generated guest media stored in our temporary guest area expires after seven days; newly generated free-account media stored in our temporary free-account area expires after 30 days. A history entry or result link may remain after its temporary file expires. Older files stored outside these areas may not follow those periods.
• Account and saved creative content. Account details, saved prompts and settings, generation tasks, paid account results, and saved reference copies currently have no fixed automatic expiry while the account remains active. You can remove visible history and asset-library entries in the Service. This removes their database entries but does not immediately delete every associated media file from object storage; another task or record may still refer to a file.
• ChatGPT authorization. Consent requests expire after 15 minutes, authorization codes after five minutes, access tokens after 30 minutes, and refresh tokens 30 days after their last rotation. Revoked credentials stop working immediately. These are validity periods, not guaranteed physical-deletion periods: we store credential hashes and related authorization records, which may remain after expiry until an operational cleanup. We schedule that cleanup every two minutes for expired consent requests and authorization codes, and for token records after revocation or after both access and refresh credentials expire. Failed or delayed runs can extend the time before those records are deleted.
• Operational records. Our hosting provider retains service logs for 14 days, and our analytics provider retains session replays for 30 days. Product analytics events, error reports, support communications, and copies in backups do not currently have one verified fixed deletion period across all systems. We review them when handling a verified privacy request, subject to security, legal, and operational needs.
• Payment and tax records. We keep transaction, invoice, refund, and related accounting records required by applicable law for at least five years from the relevant Year of Assessment in Singapore, and longer where a legal hold or dispute requires it.

To request access, correction, or deletion of other account data, use our contact page or email support@imgeditor.co. We verify and assess each request under applicable law; the Service does not currently provide instant, comprehensive account deletion. You can also disconnect the plugin in ChatGPT to stop further use of that connection, and contact us about revoking an outstanding authorization.

11. International Transfers

We operate from Singapore and work with service providers in multiple jurisdictions. Your personal data may be transferred to and processed in countries where privacy laws may differ from those in your location. Where required, we use appropriate contractual, technical, and organizational safeguards for international transfers.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. No online service can be guaranteed to be completely secure, so you should use strong account credentials and keep your login information confidential.

13. Your Privacy Rights

Depending on your location, you may have rights over your personal data. We may ask you to verify your identity before responding to a request.

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete personal data.
• Ask us to delete personal data, subject to legal, security, billing, fraud prevention, and operational retention needs.
• Object to or restrict certain processing where applicable law gives you that right.
• Withdraw consent where processing is based on consent.
• Receive information about how we process personal data and lodge a complaint with a relevant authority where available.

14. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to review and remove the information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes are effective when posted on this page, unless a different effective date is stated or another notice is required by law. We encourage you to review this page periodically.

16. Contact Us

If you have questions about this Privacy Policy, data practices, or opt-out choices, contact us through our contact page or email support@imgeditor.co.