Privacy Policy
How ImageWave handles account information, uploaded images, processing and privacy requests.
Effective date:
1. Who this policy covers
This policy describes the practices of ImageWave, the operating brand of the service at imagewave.ai. It covers information processed to provide the website, account features and image-processing service. Contact us using the email below for questions about your information.
2. Information we process
Account information includes your account identifier, username, authentication information, display name, avatar and preferences, and an email address if you provide one or use an available sign-in method that supplies it. User content includes uploaded originals, extracted text, instructions, generated results and project records.
Order and service records can include transaction identifiers, amounts, currency, payment status and credit activity. Technical and security records may include IP address, browser information, request times and error logs. Support requests include the information you choose to send us.
3. Image uploads and AI processing
Standard image-selection previews run in the browser where supported. Some formats, including AVIF and HEIC/HEIF, may require sign-in and a temporary upload for conversion. Submitting a processing task stores the original and project on our server and sends the content needed for the task to the configured image-processing provider, currently through APIYI.
ImageWave uses your content to carry out your requests, provide access to results, and handle related support and security needs. ImageWave does not use your uploads to train its own AI models or for advertising. External AI providers have their own data-handling practices; do not upload sensitive content you are not authorized or comfortable to have processed by those providers.
4. Service providers and disclosures
We use hosting and security providers to operate and protect the service. Application services are hosted in Hong Kong. Cloudflare provides delivery, security and R2 object storage for uploaded images and results. AI processing providers receive the content necessary to perform requested tasks. Information may be stored or processed outside your country, where data-protection rules may differ.
When a purchase is processed by Paddle, Paddle handles payment and transaction information under its own privacy policy. Other payment methods are handled by the provider identified at checkout. ImageWave receives the order information needed to deliver credits, maintain records and assist with support; it does not store full payment-card details.
Support email sent to our public contact address is delivered through Cloudflare Email Routing and handled in Gmail. These providers process message information for delivery, security and support.
We do not sell your personal information or uploaded content. We may disclose information when necessary to comply with law, protect the service or users, or handle a lawful business transfer subject to appropriate protections.
5. Storage, sharing and retention
Projects and results are private to their owner by default. Where sharing is available, a valid link you create can allow other people to view or download the linked result without signing in. Revoke it using the available project controls or contact us. API keys and sharing links should be kept secure.
Uploaded originals, results and projects remain available as part of your account history until removed or otherwise handled following a valid request. We do not promise automatic deletion of all uploads after a fixed number of hours. Removing a history project invalidates its related sharing links. Necessary payment, credit, invitation, security and audit records may be retained for recordkeeping, disputes and legal obligations. Backup copies may also be retained where needed for security and recovery.
7. Your choices and privacy requests
Depending on applicable law, you may request access, correction, deletion, a copy of your information, or limits on processing. You can use available account and history controls or email us. We may need to verify ownership before acting. Account deletion is not an immediate or automatic feature unless it is explicitly available in your account. Requests do not require us to delete records that must lawfully be retained.
The service is not intended for children under 13. If you believe a child has provided personal information, contact us so we can review the situation. We may update this policy and will provide notice or obtain consent where required. Higher age or parental-consent requirements under applicable law also apply.