Privacy Policy

1. Who we are

This Privacy Policy applies to the online AI photo editing and image processing services provided by Maixiang (“we,” “us,” or “our”).

For privacy, support, and data rights requests, contact zhexindx@gmail.com.

2. Information we collect

Account information: your name and email address. If you use email and password sign-in, we store a password hash. When you sign in with Google or GitHub, we also receive your profile photo and third-party account identifier. We do not store your third-party account password.

Service data: images you upload, generated results, editing settings, job records, credits, and membership information.

Order information: order numbers, products, amounts, currencies, payment status, and refund status. Pro plans are one-time purchases and do not renew automatically. Waffo Pancake handles full payment card details; we do not store them.

Technical and security information: IP address, browser and device information, request times, error logs, sign-in sessions, and security verification records.

3. How we use information

We use this information to create and maintain accounts, provide AI image services, save generation history, process orders and refunds, provide credits and Pro benefits, send essential security and service notices, and prevent fraud, abuse, and unauthorized access.

We may use de-identified or aggregated data to analyze service reliability and improve the product. We do not use uploaded content to train competing AI models.

4. Cookies and tracking technologies

We use essential cookies to maintain sign-in sessions, account security, and core feature settings. Disabling these cookies may prevent sign-in and other features from working properly.

We also use Google Analytics to understand website visits and navigation. It may use analytics cookies and process page URLs, browser and device information, and usage events. We do not send uploaded photos, generated images, account email addresses, or payment details as analytics event data. Google Signals and advertising personalization are disabled in our website tag.

Cloudflare Turnstile is used to verify human visitors and prevent automated abuse. Google, GitHub, Waffo Pancake, and related infrastructure providers may process information under their own privacy policies.

5. Sharing information

We do not sell personal information. We share relevant data only as necessary to provide the service with Google or GitHub (sign-in), Google Analytics (website usage statistics), Waffo Pancake (payments), Cloudflare (human verification), and our cloud database, object storage, and AI service providers.

Waffo Pancake processes payment card information, which is not stored on our servers. We may also disclose necessary information when required by law or a court order, or to protect users and platform security.

6. AI services and uploaded content

Uploaded images and editing settings are sent to the AI providers needed to fulfill your request. We process this content only as needed to provide the service, handle security incidents, and meet legal obligations.

You must have the right to upload and process your images. Do not upload content that violates another person’s privacy, is unlawful, or contains third-party material you are not authorized to use.

7. Data security

We protect data in transit with HTTPS/TLS and use measures such as access controls, least-privilege permissions, database row-level security (RLS), encryption, and hashing to protect account and service data.

If a security incident may affect your rights or interests, we will notify affected users and relevant regulators as required by applicable law. You should also protect the devices and accounts you use to sign in.

8. How long we keep data

We retain account information while your account is active. After you close your account, we will delete or anonymize account data that can be removed within a reasonable period.

Order, payment, and refund records are retained as required by applicable tax, accounting, and legal obligations. Security audit and error logs are generally kept for no more than 12 months. Uploaded photos are available for 24 hours after upload; generated images are available for 24 hours after creation. Access expires automatically, and scheduled cleanup deletes the files from our image storage. Download any images you want to keep before they expire. Third-party AI providers process submitted images under their own retention policies.

9. Your data rights

You may email zhexindx@gmail.com to request access to, correction, deletion, or export of your personal information, or to object to or restrict certain processing. We generally respond within 30 calendar days of receiving a complete request.

To protect your account, we may ask you to verify your identity. Order or security records that must be kept by law may not be deleted immediately.

10. International processing

Our database, object storage, payment, sign-in, human verification, and AI providers may be located outside your country or region. By using the service, you acknowledge that relevant information may be transferred to the regions where those providers operate. We will take reasonable protective measures in accordance with applicable law.

11. Children’s privacy

The service is intended for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you become aware of this happening, contact zhexindx@gmail.com.

12. Policy updates and contact details

We may update this policy to reflect changes to the service, legal requirements, or security needs. We will announce material changes on the website or by email and update the effective date at the top of this page.

For privacy, data deletion, support, or security matters, email zhexindx@gmail.com.