Privacy Policy

Who we are

AI Image Combiner ("we", "us") operates this website and the image tools on it. For anything in this policy, contact help@musepics.com.

What we collect

Account data. Your email address, display name, a hashed password (we never store the password itself), and — if you sign in with Google — the profile information Google shares with us: name, email, and profile picture.

Photos you upload. The images you select for a generation, sent to us through your browser. We do not ask for access to your photo library; only the files you explicitly choose are transmitted.

Generated images. The results we produce, plus the prompt and settings used to produce them, so you can see your history and generate a variation later.

Usage and billing records. Which tool you used, model, credit cost, task status, timestamps, IP address, browser user agent, and the orders and subscriptions attached to your account. We do not store card numbers — payments are handled entirely by PayPal.

Cookies. A session cookie that keeps you signed in, and a preference cookie for theme. We do not use advertising cookies.

How we use it

• To run the generation you asked for, and show you the result.
• To keep your history, credits, and subscription in sync.
• To detect abuse: rate limiting, multiple free accounts, automated bulk use.
• To send transactional email only — verification, password reset, receipts. We do not send marketing email unless you ask for it.
• To diagnose failures and improve the prompt presets for each tool.

We do not train models on your photos, and we do not sell your data.

Who we share it with

We use a small number of processors. Each one receives only what it needs to do its job:

| Processor | What it receives | Why | |---|---|---| | OpenRouter (and the model provider behind it, currently Google) | Your photos and prompt, for the duration of a generation | To generate the image | | Cloudflare | Hosting, database, file storage, bot checks | Runs the site and stores your files | | PayPal | Email, order amount, billing country | Processes payment | | Resend | Your email address | Delivers verification and receipt email |

When you generate an image, your photos leave our servers and go to the model provider for that request. Their handling of the request is governed by their own terms; we choose providers that do not train on API inputs by default. If you are not comfortable with that, please do not upload photos you cannot share with a third party.

We may also disclose data if legally required, or to protect the rights and safety of users.

International transfers

Our infrastructure and processors are located in the United States, the European Union, and the Asia-Pacific region. If you are in the EEA or the UK, transfers outside those regions rely on standard contractual clauses or an equivalent safeguard offered by the processor.

How long we keep it

• Account data — until you delete your account.
• Uploaded photos — processed in memory and stored only when a generation needs to reference them; removed with the account.
• Generated images — kept so your history works. If you are on the free tier, image files older than 7 days are deleted from storage automatically; the history record remains but the file is gone.
• Billing records — kept as long as tax and accounting rules require.
• Server logs — short-lived, used for debugging and abuse detection.

Deleting your account removes your photos, generated images, and history. Order records are retained in anonymised form where law requires it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your data, to object to processing, or to lodge a complaint with your local data protection authority.

You can exercise most of these directly from Settings: edit your profile, download your images, or delete your account. For anything else, email help@musepics.com — we respond within 30 days.

If you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA.

Security

Traffic is encrypted in transit. Passwords are hashed. Access to production data is limited to the operator. No system is perfectly secure — if we ever suffer a breach affecting your data, we will notify you and the relevant authority as required by law.

Children

The service is not intended for anyone under 13, or under 16 where local law sets a higher age for consent to online services. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

Changes

If this policy changes materially, we will email registered users and update the date above. Continuing to use the service after a change means you accept the updated policy.

Contact

help@musepics.com