Back to home

Privacy Policy

What H3 Image collects, why, who processes it, how long it is kept, and how to export or delete it.

Last updated: 2026-11-12

This policy explains how H3 Image at h3-image.co ("we", "us") handles personal data when you visit the site or use the Service. It is part of our Terms of Service. All dates are in UTC.

The short version

  • We collect what we need to run the generator, bill you and keep the Service safe.
  • We send your prompt and reference images to the model provider only to make your image.
  • We do not sell your data, and we do not use your prompts or images to train AI models.
  • You can delete images yourself at any time, and you can ask us to export or delete everything.

What we collect

Account details

Your email address and name. If you sign in with Google, we also receive your Google profile name and picture. If you sign up with email and a password, the password is stored only as a secure hash.

What you create

  • the prompts you write, and the settings you choose (mode, resolution, aspect ratio, format);
  • the reference images you upload for edits;
  • the images the Service generates for you;
  • the status and cost of each run.

Billing records

Your plan, orders, payment status, amounts and credit balance and history. Card details are collected and stored by Stripe, not by us. We only receive the payment result and limited details such as the card brand and country.

Support messages

What you send us by email or through a support ticket, including any screenshots you attach.

Technical data

IP address, browser and device type, the pages you visit, and error logs. We use it to run the site, prevent abuse and fix problems.

Cookies

  • Essential cookies keep you signed in, remember your language and protect forms against misuse. The site does not work without them.
  • Analytics cookies are only set if we turn on an analytics tool, and only after you agree where the law requires consent. You can change your choice in the cookie banner.

We do not use advertising cookies or sell data to advertisers.

Why we use it

  • To provide the Service you asked for: run generations, store your history, keep your credit balance right. This is needed to perform our contract with you.
  • To take payments and manage plans. This is needed to perform our contract with you.
  • To keep the Service safe: rate limits, detecting multiple free accounts, fraud and abuse. This is our legitimate interest.
  • To support you: answer questions and send service messages, such as receipts, failed-payment notices and important changes. This is needed for our contract with you, or is our legitimate interest.
  • To improve the Service, using aggregated usage statistics, such as which resolutions are used most. This is our legitimate interest, or your consent where analytics cookies are involved.
  • To meet legal duties, such as tax records and responding to lawful requests.

We do not use your data for automated decisions that have legal or similar significant effects on you.

Who we share it with

We share data only with providers that help us run the Service, and only what each one needs:

  • AI model provider (currently kie.ai) receives your prompt, settings and reference images to make the image, and returns the result. Images are held in its temporary storage while a job runs. Its generated-image links expire after about 14 days. We copy finished images into our own storage.
  • Cloudflare provides hosting, our database and image storage (R2), and sends our service emails.
  • Stripe processes payments and subscriptions.
  • Google handles sign-in, if you choose to sign in with Google.

We may also disclose data if the law requires it, to protect people from harm, or as part of a sale or merger of the Service. If that happens, this policy keeps applying to your data.

International transfers

Our providers may process data outside your country, including in the United States. Where the law requires it, these transfers rely on safeguards such as the European Commission's standard contractual clauses.

How long we keep it

  • Images, prompts and run history: until you delete them or close your account. Reference images you upload are kept with the run they belong to.
  • Account details: while your account is open.
  • Billing records: as long as tax and accounting law requires, usually up to 7 years, even after your account is closed.
  • Support messages: up to 2 years after the conversation ends.
  • Technical logs: up to 30 days, unless we need them longer to investigate abuse.

When you delete an image from My creations, it is removed from your account at once. Copies in backups and provider caches are cleared on their normal schedule.

Security

We use HTTPS everywhere, store passwords only as hashes, and encrypt the service keys we use to talk to providers. Images are served from links that are hard to guess, but anyone you share a link with can open the image. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Your rights

Depending on where you live (for example, under the GDPR in the EU and UK, or the CCPA in California), you have the right to:

  • access the personal data we hold about you, and get a copy;
  • export it in a common format;
  • correct data that is wrong;
  • delete your data and close your account;
  • object to or restrict some processing, such as analytics;
  • withdraw consent where processing is based on consent;
  • complain to your data protection authority.

How to use them

  • You can delete individual images yourself from My creations at any time.
  • For anything else, email support@h3-image.co from the address on your account. We may ask you to confirm that the account is yours.
  • We reply within 30 days. It is free unless a request is clearly excessive.

We do not sell or "share" personal data for targeted advertising, as those terms are defined under California law.

Children

The Service is not intended for children under 13, or under the minimum age for digital services in your country if that is higher. We do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Changes to this policy

We will post updates here and change the date at the top. If a change is significant, we will notify you by email or on the site before it takes effect.

Contact

Privacy questions and requests: support@h3-image.co