Harry Lee ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use EditTextInImage (the "Service") at https://edittextinimage.com, and the rights available to you.
Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy periodically and will notify you of material changes by email or in-product notice.
#1. Data Controller§
The data controller for this Service is:
- Name: Harry Lee
- Status: individual / sole trader operating under the laws of China
- Privacy email: support@edittextinimage.com
- Data Protection Officer (DPO): Not applicable
#2. Personal Information We Collect§
2.1 Information You Provide Directly
- Account information: name, email, and profile details you provide when you register or sign in (through Google).
- Payment information: transaction amount and payment status. Full card numbers are not stored by us — card data is processed by our payment processors (see Section 5).
- Communications: emails, support requests, and feedback you send us.
- AI inputs and outputs: original text, replacement text, uploaded images, optional selected regions, generated images, task settings, task status, and download activity when you use AI features.
Do not submit highly sensitive personal information in prompts or uploaded media unless the Service explicitly supports that use case and you have the necessary rights and consent.
2.2 Information We Collect Automatically
- Device and network data: IP address used for security and infrastructure (we do not retain the raw request IP address in first-party acquisition analytics), device type, operating system, browser type, and time zone.
- Usage data: pages visited, feature usage, and session activity.
- Log data: request timestamps, error logs, and performance metrics used to operate and secure the Service.
- First-party analytics: a pseudonymous visitor and session identifier, the page path without query parameters, campaign fields, referring domain, and a two-letter country code inferred by our infrastructure. We do not retain raw advertising click identifiers in acquisition analytics.
2.3 Third-Party Login
When you sign in with Google, we receive your name, email, and basic profile details provided by Google.
#3. How We Use Your Information§
We use your information to:
- Provide and maintain the Service (contract performance)
- Process billing and payments (contract performance)
- Provide customer support (contract / legitimate interests)
- Send service notices about billing, security, and policy changes (legitimate interests)
- Secure the Service and prevent abuse (legitimate interests)
- Understand product usage and improve reliability (legitimate interests)
- Comply with law (legal obligation)
We may process prompts, uploaded media, generated media, task settings, and related metadata to provide AI features, enforce limits, prevent abuse, debug failures, support refunds, and maintain security.
We may aggregate or anonymize data for statistical purposes. Such data cannot reasonably be linked to an individual.
#4. Cookies and Tracking Technologies§
| Type | Purpose | Disableable |
|---|---|---|
| Strictly necessary | Login sessions, security, and checkout | No |
| Functional | Language and theme preferences | Yes (via browser controls) |
| Analytics | First-party product analytics | Yes (Settings → Security) |
We do not use marketing or advertising cookies. Details are in the Cookie Policy.
We enable privacy-conscious analytics by default to understand product usage and reliability. You may opt out in Settings → Security. An explicit analytics opt-out is respected on later visits, subject to technical and legal retention requirements.
The editor may store an unfinished draft, including the source image and entered text, in IndexedDB on your device for up to 24 hours to restore your edit after sign-in or a reload. You can clear it through your browser storage controls. This storage is separate from server-side records.
#5. Sharing and Disclosure§
We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share your information only in the following circumstances:
- Service providers: AI providers, storage providers, payment processors, email providers, analytics providers, and infrastructure providers, bound to process data only as needed to provide their services. They may process personal data, AI inputs, generated media, payment metadata, device data, or support records as needed to provide their services.
- Payments: Waffo.com Limited acts as Merchant of Record for Waffo checkout. Waffo processes payment details under its Privacy Policy. We receive transaction and fulfillment information; we do not store full card numbers.
- Legal requirements: where required by law, court order, or a lawful regulatory request.
- With your consent: for any other purpose, with your explicit prior consent.
Generated assets may be private by default, accessible through account controls, signed download URLs, or share links depending on your settings. Revoking a share link or deleting an asset may not remove copies already downloaded, cached, backed up, sent to a provider, or retained when legally or operationally required.
#6. Data Security§
- Encryption in transit (TLS / HTTPS)
- Passwords and sensitive credentials stored hashed or encrypted by our authentication provider
- Access limited to what is needed to operate the Service
- Essential error and performance monitoring with sensitive request data removed before reporting
In the event of a personal-data security incident, we will notify relevant authorities within 72 hours of becoming aware of it where required by law, and we will notify affected users without undue delay where required by law. Keep your credentials secure and do not share them.
#7. Data Retention§
| Data type | Retention | Upon expiry |
|---|---|---|
| Account information | While the account is active; 90 days after account closure or deletion request, unless a longer legal period applies | Delete or anonymize |
| Transaction and billing records | As required for tax, accounting, and dispute handling | Delete or archive |
| AI task metadata and generated-asset records | While needed to provide the Service, then in line with account deletion and asset policy | Delete or restrict |
| Support records | As needed to resolve requests, then delete | Secure deletion |
| First-party acquisition analytics | Up to 13 months | Delete or rotate identifiers |
| Security logs | As needed for security and abuse prevention | Secure deletion |
You can stop future analytics in Settings → Security; account deletion requests are handled separately.
#8. Your Data Rights§
Depending on your location and applicable law, you may request access, deletion, correction, export, or removal of personal data, generated media, or account content. Email support@edittextinimage.com. We aim to respond within 30 calendar days. We may need to verify your identity, preserve financial, security, consent, audit, or legal records, and coordinate with providers before completing a request.
You may also lodge a complaint with your local data protection authority.
#9. Marketing and Opt-Out§
We do not send marketing emails by default. If we ever do, they will require consent where required by law, and you can opt out through the unsubscribe link or by emailing support@edittextinimage.com. Opting out does not affect essential service notices such as billing and security alerts.
#10. International Data Transfers§
Our infrastructure and providers may process data in multiple regions, including where our AI, storage, payment, and hosting providers operate. For international transfers we rely on contractual safeguards with providers, including Standard Contractual Clauses where they apply, and transfers only to recipients that provide an appropriate level of protection.
#11. Children's Privacy§
The Service is intended for users aged 18 and above. We do not knowingly collect information from children below that age. If you believe a child has provided information, contact support@edittextinimage.com and we will delete it promptly.
#12. Third-Party Links and Services§
The Service may include links to, or integrations with, third-party services (including AI model providers and payment processors). This Policy applies only to data we collect. Review those providers' policies before use.
#13. Policy Changes§
For material changes, we will provide at least 14 days' advance notice by email or in-product notice, and update the date at the top of this page. Continued use after the effective date constitutes acceptance.
#14. Contact Us§
- Privacy and support: support@edittextinimage.com
- Name: Harry Lee
- Website: https://edittextinimage.com
Last updated: 8 September 2026 · Harry Lee · https://edittextinimage.com