Image processing
Images use private temporary storage and a third-party processor. Inputs are deleted after success. Recoverable failures keep the original privately for up to one hour for one manual retry; you can delete it immediately. Other failed inputs are deleted. Results last up to one hour, with a 24-hour storage deletion backstop.
Optional provider checks
The OpenAI checker sends your chosen image to OpenAI only with separate permission; OpenAI says this check is not eligible for Zero Data Retention. The Google checker opens Gemini for a direct upload to Google. Each check is subject to its provider's terms.
Abuse prevention and records
Anonymous browser and keyed network identifiers support service limits without retaining raw IP addresses. Upload records are temporary and are removed after seven days. A compact processing history remains indefinitely, containing opaque job and batch references, times, outcomes, dimensions, costs and numerical processing measurements. It does not contain image files, filenames, extracted text, account details, network identifiers or access credentials. Cloudflare may handle normal request data to provide network security and analytics.
Accounts and sign-in
Accounts use a verified email, a username, or a provider identifier. Where enabled, Microsoft, LINE and Kakao do not require email. Matching emails never merge accounts. Passwords and recovery codes are hashed. Provider tokens are discarded. Challenges expire after 10 minutes and sessions after 30 days. Email signups can receive codes and welcome messages. GitHub requests email access, never repository access.
We keep a keyed email or provider-identity hash and a minimal grant record to prevent repeat signup offers across our websites.
Account follow-up
New accounts may receive one feedback email with extra credits after three days without buying. To avoid repeats across sites, we store a keyed email hash, signup time, delivery state, opt-out and redemption record. The email link lets you unsubscribe while keeping sign-in emails. English mail is delivered by Cloudflare, with replies sent to support. Opening and clicking are not tracked.
API keys
API access retains names, masked prefixes and keyed hashes, without storing complete API keys. You see a newly created key only once. Keys can be revoked in your account, and revoked records are cleared after seven days. API uploads share the temporary storage and deletion timetable used for website uploads.
Payments and account deletion
Checkout is handled by Stripe and requires an email for billing, also for customers who sign in with a username. A checkout address is separate from your login identity and cannot link accounts. We retain dollar-balance entries and limited payment/refund receipts for seven years in storage separate from images. Only opaque job references appear in those records; image contents, filenames and extracted text are excluded. Contact us about deletion or refunds using your account email or the support form from a signed-in session. We may retain the records needed for payment administration, disputes and applicable obligations.
Support mailbox
Messages to support@removesynthid.com, including permitted attachments, go to a private operator mailbox so we can reply. Active conversations are kept until deletion by an operator. Trash can be deleted after 30 days, with removal at the next daily maintenance run. Cloudflare provides routing, storage, access control and transactional delivery for the mailbox. Do not include credentials or highly sensitive personal details.
When feedback comes from a logged-in session, the server attaches its account reference along with any reply email you supply. Mailbox retention applies to the submitted message and these details. The optional reply address stays separate from the account's sign-in identity.
Measuring pricing layouts
We have stopped testing pricing layouts; detailed experiment records are kept for 90 days, then only aggregate totals without browser or account identifiers remain.
Tracking and controls
We use no advertising profiles, advertising pixels or data-broker connections. Necessary browser storage supports upload state and service limits. Browser previews of your originals are cleared when you delete an image, replace its saved batch or revisit expired results. Signed-in users also get private previews on other devices; stored previews share the result's one-hour access and deletion schedule, backed by a 24-hour storage rule. Choose “Delete now” when available, or email support@removesynthid.com; do not include job credentials.