Privacy Policy

Apr 22, 2026

Overview

This Privacy Policy explains how GPTimage2 ("we", "us", or "our") collects, uses, stores, and shares personal data when you use gptimage2.best and related services.

If you have any questions about this Privacy Policy or how we handle personal data, contact us at [email protected].

Who We Are

Service name: gptimage2.best
Operator: GPTimage2
Contact email: [email protected]
Jurisdiction: United Kingdom

For UK data protection purposes, GPTimage2 is the controller of the personal data described in this Privacy Policy, except where a third-party provider acts as an independent controller for its own services.

What We Collect

We may collect the following categories of data:

1. Account Information

When you create or use an account, we may collect:

Email address
Name, username, or profile image, if provided through account or sign-in providers
Account identifiers and authentication status

We use this information to operate your account, secure access to the service, and provide support.

2. User Content

When you use the service, we may process:

Text prompts
Uploaded images
Generated images
Related metadata needed to provide the service

We use this information to generate and return image results, maintain recent task history, support troubleshooting, and provide account-related features.

3. Usage, Device, and Log Data

We may collect:

IP address
Browser, device, and operating system information
Log data, request metadata, error data, and service activity records
Usage analytics and interaction events

We use this information to secure the service, detect abuse, diagnose faults, measure performance, and improve reliability.

4. Cookies and Similar Technologies

We may use cookies and similar technologies to:

Keep you signed in
Remember preferences
Support core site functionality
Measure traffic and service usage

Where required by law, we will rely on an appropriate legal basis or obtain consent before using non-essential cookies or similar technologies.

5. Payment Information

Payments are processed through Stripe. We do not store full payment card numbers.

We may receive payment-related data from Stripe, such as:

Payment status
Payment identifiers
Limited billing metadata
Subscription and invoice information

We use this information to confirm purchases, manage billing, detect payment fraud, and provide customer support.

How We Use Personal Data

We use personal data to:

Provide and operate the service
Authenticate users and maintain accounts
Process prompts, uploads, and generated outputs
Manage subscriptions, billing, and credits
Detect abuse, fraud, security incidents, and misuse
Provide support and respond to requests
Comply with legal obligations
Improve the performance, reliability, and safety of the service

Legal Bases

Depending on the context, we rely on one or more of the following legal bases under UK data protection law:

Contract: where processing is necessary to provide the service you requested
Legitimate interests: for security, fraud prevention, service improvement, and business operations, where these interests are not overridden by your rights
Legal obligation: where processing is required by law
Consent: where consent is required, for example for certain optional cookies or communications

Model Training

We do not use your prompts, uploaded images, or generated images to train our models.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In particular:

Prompts, uploaded images, and generated images are retained for 14 days, unless a longer period is required for security, legal compliance, dispute handling, or fraud prevention
Account, billing, and transaction records may be retained longer where required for tax, accounting, legal, or operational reasons

We may delete or anonymize data earlier where appropriate.

We may share personal data with:

Stripe, to process payments and manage billing
Service providers that support hosting, storage, security, analytics, email delivery, or infrastructure operations
Professional advisers, auditors, insurers, or legal representatives where needed
Law enforcement, regulators, courts, or other authorities where required by law or to protect rights, safety, and security

We do not sell your personal data.

International Transfers

Some service providers may process data outside the United Kingdom. Where personal data is transferred internationally, we will use appropriate safeguards where required by applicable law.

Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

No internet or storage system is completely secure. We therefore cannot guarantee absolute security.

Your Rights

Depending on applicable law, you may have rights to:

Access personal data
Correct inaccurate personal data
Request deletion of personal data
Object to or restrict certain processing
Request portability where applicable
Withdraw consent where processing relies on consent
Complain to the UK Information Commissioner's Office (ICO)

To exercise your rights, contact [email protected].