Privacy Policy

Who operates the service

ChangeTextImage is an independently operated service run by an individual. For privacy requests, contact laitom607@gmail.com. This policy covers https://changetextinimage.org and should be read with our Terms of Service.

Information we process

We process account details such as name, email, authentication records and password hashes; uploaded images, editing instructions, original and replacement text, and generated results; order references, payment status, amounts and credit transactions; support messages; and technical information such as IP addresses, request times, browser information and error logs as needed to operate and secure the service.

Do not upload images containing sensitive personal information unless you have an appropriate basis and permission to do so. Editing may send image content and instructions to an external AI provider.

Purposes and legal bases

We use account and image data to provide the service, and transaction data to deliver credits and handle billing. Where applicable, these activities rely on performance of our contract with you. Security, abuse prevention and operational troubleshooting rely on legitimate interests, subject to your rights. Records required for tax, accounting or other legal obligations are processed for compliance with those obligations. Processing that requires consent will rely on that consent; you may withdraw it without affecting prior lawful processing.

Providers and disclosure

We use Cloudflare for website infrastructure and the D1 database. Our current AI editing integration sends images and instructions to fal.ai's Nano Banana service. The AI provider and its model infrastructure may process that content to produce results; their retention and processing terms also apply. We do not promise that all supplier systems immediately erase every copy.

Waffo Pancake handles hosted checkout and payments. We receive payment and order information needed for fulfillment and support, but do not store full card numbers or security codes.

Provider information: Cloudflare privacy policy, fal.ai privacy policy, and Waffo. We may disclose necessary information to comply with legal obligations, prevent abuse, or handle a business transfer with applicable safeguards. We do not sell personal information.

Cookies and preferences

Authentication and security cookies support login and core functions. Language and interface preferences may be stored in your browser. Browser controls can restrict or remove cookies, although doing so may prevent login or disrupt functionality. This policy does not imply that an analytics or advertising tool is active merely because the software supports it. If we introduce non-essential tracking requiring consent, we will provide the required notice and choice before enabling it.

Retention and deletion

Account data is retained while needed to maintain the account. Images and instructions are processed to complete editing; generated results can be downloaded by you. We do not promise permanent cloud storage or a fixed automatic image-deletion deadline.

Order and credit records may be retained after account closure for accounting, fraud prevention, dispute handling and legal obligations. Support and technical records are retained only as reasonably needed for their purpose and applicable requirements. Actual deletion may be subject to legal holds and provider backup schedules.

You may request account or content deletion by email. We will explain what can be deleted, what must be retained and the applicable timeframe. Copies you download or share are outside our control. No claim of zero retention or supplier-wide exclusion from model training is made by this policy.

Your choices and rights

Depending on your location, you may request access, correction, deletion, a portable copy, restriction of processing, objection or withdrawal of consent. Contact us from your registered email; we may verify identity to protect your data. We aim to respond within 30 days, or the applicable legal period, and explain any lawful extension. You may complain to your local data-protection authority. These requests do not require an account-settings export or deletion feature.

Security and international processing

We use HTTPS, password hashing and access controls. No system is perfectly secure. We will handle personal-data incidents and notify affected people or authorities where required by applicable law.

Our infrastructure and suppliers may process data outside your country. Applicable protections depend on the providers and relevant contracts. Where legally required, appropriate transfer arrangements must apply; we do not claim certifications or contractual safeguards that have not been established.

Age, communications and updates

The service is intended for adults aged 18 or over. Contact us if a child has provided personal data. We will investigate and take appropriate action.

We use your email for service, billing, security and support communications. Marketing that requires consent will be sent only with that consent and an available opt-out. Material policy changes will be communicated on the site or by email as appropriate and required by law.

Contact: laitom607@gmail.com.

Pre-generation content safety

Before generation, we send editing prompts, including original and replacement text, to Waffo for content safety screening. Generation proceeds only after an explicit allow verdict. According to Waffo's documentation, this endpoint is stateless and does not retain the original prompt. We do not send uploaded images to this screening endpoint. Blocked, pending or unavailable checks do not consume generation credits.