Privacy Policy

ImageTidy is an online image utility operated from Canada. This policy explains what information the website processes, why, and which third-party providers are involved. It describes how the service actually works today.

1. Your images

The image tools — resize, compress, convert and bulk resize — run entirely in your browser. When you select a file, your browser reads it from your device, decodes it, redraws it on a canvas and re-encodes it locally. The finished file is created on your own device and saved through your browser’s normal download mechanism (bulk resize builds the ZIP file in your browser too).

Your images are never uploaded to ImageTidy, and we do not store, view, analyse or share them. Temporary processing data — the decoded image and the temporary link used for previews — lives only in your browser’s memory and is released when you remove the file, leave the page or close the tab.

To be precise rather than dramatic: the website itself makes ordinary network requests to load pages, styles, fonts and scripts, and your browser tells our host your IP address and user agent as it does for every website. What those requests never contain is your image data.

2. AI Creator tools

The AI Creator tools (caption, hook and repurposer) require a ImageTidy account. When you run a generation, the text and options you enter — your content text and any platform, tone, content type, audience or call-to-action fields — are sent from our server to OpenAI, which generates the result. Images are never sent to the AI provider; these tools accept text only.

We keep a usage record of each generation so we can operate the credit system: the feature used, the model name, status, credits charged, token counts, an estimated provider cost and the timestamp. We do not store the text you submit or the generated output in our database — results are returned to your browser and are not retained by us after the request.

Please avoid entering sensitive personal information, confidential material or data about other people into AI prompts. OpenAI processes the request under its own privacy policy and terms.

3. Accounts and authentication

You do not need an account to use the free image tools. An account is required for the AI Creator tools, the dashboard, bulk resize and paid plans.

When you create an account we process your email address and a securely hashed password (or a magic sign-in link), together with your account identifier, sign-up and sign-in timestamps, your plan, credit balance and credit reset date. Accounts are handled by our backend provider, Supabase, which powers ImageTidy’s authentication and database.

4. Payments

Paid plans are available and are processed by Stripe. Payment details are entered in Stripe’s hosted checkout. ImageTidy never receives or stores your full card number, expiry date or security code.

Stripe collects and processes the payment and transaction information it needs to complete a purchase, prevent fraud and meet its legal obligations. We receive and store only the information needed to run your subscription: your Stripe customer and subscription identifiers, plan, subscription status and current period dates. Stripe’s own privacy policy and terms also apply to the information it processes. You can manage or cancel a subscription through the Stripe billing portal linked from your dashboard.

5. Contact form

If you use the contact form, the name, email address, subject and message you type are sent to our server and forwarded to our support inbox by our email delivery provider, Resend, so we can read and reply. We use that information only to answer you. Please do not send images or other sensitive personal data through the form.

6. Browser storage

ImageTidy stores a small amount of data in your own browser:

• Free usage counter — timestamps of your recent free image operations, held in local storage, so the site can show your remaining free allowance. It stays on your device and is never sent to us.
• Sign-in session — if you have an account, an authentication token is kept in browser storage so you stay signed in.

ImageTidy itself does not set advertising or analytics cookies. Third-party providers loaded on the site — the advertising network described below, and Stripe during checkout — may set their own cookies or use similar technologies. Clearing your browser data removes locally stored items.

7. Analytics

ImageTidy does not use Google Analytics, Google AdSense, or any other analytics or tracking script. Our hosting provider processes standard technical request data (IP address, user agent, requested URL, timestamp) to deliver pages and keep the service secure, as all web hosts do. We do not use that data to build a profile of you.

8. Advertising

Free pages may display banner advertising supplied by Asterra, a third-party ad network. Ads load inside isolated frames placed below the tools, so the ad code cannot read anything you are working on. Asterra and its partners may set cookies or similar technologies and may use your IP address, device and browser information and the page you are viewing to select and measure ads, subject to their own policies. We send them no image data, contact-form data or account information. Subscribers on a paid plan see no ads.

9. Third-party service providers

We use a small number of providers to operate the website. Each processes information under its own privacy policy:

• Supabase — accounts, authentication and database (plans, credits, usage records).
• Stripe — payments, subscriptions and the billing portal.
• OpenAI — generates the output for the AI Creator tools.
• Resend — delivers contact-form messages to our support inbox.
• Asterra — banner advertising on free pages.
• Lovable — hosting and delivery of the website; Google Fonts serves the site’s web fonts.

10. Information we collect

• Account information — email address, account identifier, plan and credit balance.
• Subscription information — Stripe customer and subscription identifiers, status and period dates. Card numbers are handled by Stripe, not by us.
• AI usage records — feature used, model, status, credits charged, token counts and estimated provider cost. Prompt text and generated output are not stored.
• AI inputs in transit — the text and options you submit, sent to OpenAI to produce a result.
• Contact-form information — your name, email address, subject and message.
• Technical information — IP address, browser and device information, requested pages and timestamps, processed by our hosting provider in server logs.

Image files are not in this list because they never leave your browser.

11. How we use information

• To provide and operate the website and its tools.
• To create and maintain accounts and keep you signed in.
• To process purchases, subscriptions and plan changes.
• To provide the AI Creator features and return your results.
• To apply free-tier and credit limits fairly.
• To keep the service secure and prevent abuse or fraud.
• To troubleshoot problems and improve the website.
• To respond to support requests.
• To comply with applicable legal obligations.

12. Data retention

Images are not retained at all, because they are never sent to us. Account, plan and credit records are kept while your account exists. AI usage records are kept so your credit history and dashboard totals stay accurate. Contact-form messages remain in our support inbox until we delete them. Information held by Stripe, OpenAI, Resend, Asterra and our hosting provider is retained under those providers’ own policies and legal obligations, which we do not control.

13. Security

We use reasonable technical and organisational measures to protect information: traffic is served over HTTPS, secret keys are held server-side and never sent to the browser, payment details go directly to Stripe, and database access is restricted by row-level security so an account can only read its own records. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

14. Children’s privacy

ImageTidy is a general-purpose utility and is not directed at children. We do not knowingly collect personal information from children where that is prohibited by applicable law. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Your privacy rights

If you are in Canada, you may have rights under applicable Canadian privacy laws, including PIPEDA and comparable provincial legislation — such as the right to ask what personal information we hold about you, to request access to it, and to ask that inaccurate information be corrected. Depending on where you live, other rights may apply. You can make a request through the contact form. We will respond within a reasonable time, subject to exceptions permitted by law, and we may need to confirm your identity first. Because we hold very little information about you, there is often nothing to export or delete.

16. International processing

Some of the providers listed above operate outside Canada, including in the United States. Information processed by them may be stored or handled in other countries and may be accessible to courts, law enforcement and regulatory authorities there under the laws of those jurisdictions.

17. Contact and changes

Questions about privacy, or a request about your information, can be sent through the contact form. We may update this policy as the service changes; when we do, the date at the top of this page changes with it.