Effective October 6, 2026 Contact us
1. Who we are
The img2.site service is operated by David de Leon de la Fuente, an individual proprietor established in Mexico, which is responsible for the personal information described in this policy. You can reach us at [email protected]. This policy is effective from October 6, 2026.
2. What we collect
We collect the account details you provide when you sign up (such as your name, email address and organization), the projects you create, the images you upload, billing information needed to run your subscription, the usage we record when your projects request delivery URLs, and standard operational logs such as timestamps, IP addresses and error information that help us run the Service reliably and securely.
3. How we use it
We use this information to provide and operate the Service, generate delivery URLs, calculate usage and manage your subscription, support customers who contact us, detect and prevent abuse, and comply with our legal and accounting obligations. We do not sell personal information and we do not use the images you upload to train machine-learning models.
4. Service providers we work with
We share information with the providers we contract with to run the platform, only as needed to deliver the Service and under agreements that restrict their use of it: Cloudflare (hosting, image storage and delivery of the service); Creem (reseller and merchant of record: payment processing, taxes and receipts); WorkOS (account sign-in and session management); Hetzner (servers in Germany that run image processing); PostHog (product analytics in the customer dashboard, when enabled). Creem, which sells our plans to you as merchant of record, processes the payment and billing details of your purchase under its own privacy notice (https://www.creem.io/privacy). We do not share customer data with advertisers. If a legal request requires disclosure, we respond in line with applicable law and inform the affected customer where we are permitted to do so.
5. Where information is processed
The Service is operated from Mexico and our providers process information in several countries, including the United States and the European Union, so your information may be transferred outside your own country. We rely on the contractual protections offered by those providers for these transfers.
6. How long we keep it
We keep account, project and usage records while your account is active and for as long as we need them for billing, accounting and legal purposes. Uploaded originals, delivered images, usage records and operational logs each follow their own retention schedule, described in our documentation at docs.img2.site. You may ask us to delete your account or specific files at any time, and we remove the data within a reasonable period, except where we are required to keep records.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, export or restrict the use of the personal information we hold about you, and to object to certain processing. Write to [email protected] to exercise any of these rights. We may ask you to verify your identity first, and we will respond within the period required by the law that applies to you. You may also complain to your local data protection authority.
8. Cookies and analytics
This marketing site does not set analytics cookies. Signing in to the customer dashboard sets session cookies that are required for the dashboard to work. When product analytics is enabled in the dashboard we use PostHog to understand which features are used and where people get stuck; it records page views and interactions tied to your signed-in account and does not read the contents of the images you upload.
9. Sign-in and Google data
WorkOS manages authentication using session cookies. Signing in with Google supplies basic identity information such as your name, email address and profile image where available; this integration does not request Gmail messages, Drive files, contacts or calendars. We use this information only to give you access to your account. Revoking access in your Google Account does not by itself delete your img2.site account or existing records — contact us to request account deletion.
10. Public image delivery
Images published through delivery URLs are accessible to anyone who has the URL, and recipients may keep copies. Deleting an image from the Service cannot remove copies that recipients already obtained. Delivered images are sanitized copies with embedded metadata removed; do not use the Service for images that must stay private.
11. Security
We protect information with encryption in transit, access controls, scoped project API keys that you can revoke, and separation between the systems that store your files and the systems that deliver them. No online service can promise perfect security. If a breach affects your personal information, we will notify you and any regulator as required by applicable law.
12. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information to us, contact us so we can remove it.
13. Changes to this policy
We may update this policy as the Service evolves. Material changes are communicated to active customers before they take effect, and the current version with its effective date is always published on this page. Current version effective October 6, 2026.
14. Contact
Privacy questions and requests for access, correction or deletion can be sent to [email protected]. Include your account email, and never send passwords or API keys. We may verify your identity before acting on a request.