Privacy Policy
How Image to Layers protects your privacy
Your images stay private by default
Image to Layers provides AI-powered layer separation services for creative professionals. We only collect the minimum data needed to authenticate users, bill credits via Creem.io, and operate the service.
Last updated: September 10, 2026
Private by default
Your uploaded images and outputs are private to your account. Download links are protected via authentication or signed URLs.
Retention controls
Free files are retained for up to 7 days, Creator Lite and Creator files for up to 30 days, and Studio files for up to 1 year. You can delete supported files earlier from your dashboard.
User control
You may request deletion of your profile data or billing records at any time.
Information we process
- Account data: email, encrypted Supabase auth ID, and profile credits count.
- Billing data: payment-provider customer ID, payment history, checkout identifiers, and charge metadata.
- AI processing data: uploaded files, prompts, job settings, model identifiers, outputs, and operational metadata needed to complete a request.
- Operational data: image size, job duration, quality settings, and error codes for debugging.
How we use the data
- Authenticate users and allocate credits.
- Process payments and send invoices through our payment providers, including Creem and Waffo where applicable.
- Route AI jobs to the provider and model selected for the workflow, and protect the service against abuse and fraud.
- Improve layer separation quality and guard against abuse/fraud.
Images & confidentiality
- All requests are encrypted in transit (TLS).
- Images may be temporarily stored to complete processing and provide downloads during the retention period.
- We sign Data Processing Agreements (DPAs) upon request for teams with compliance requirements.
Children’s privacy
Image to Layers is intended for users who are at least 18 years old and is not directed to children.
We do not knowingly collect personal information from anyone under 13, or under 16 in the EEA and UK. If we learn that we have collected such information without the required parental or guardian consent, we delete it and close the account.
If you are a parent or guardian and believe your child has provided us personal information, email support@imagetolayers.com and we will remove it.
Third parties
We rely on vetted vendors who comply with GDPR/CCPA:
- Supabase – authentication, profile credits, PostgreSQL storage.
- Creem.io and Waffo – payments, invoicing, subscription administration, and anti-fraud checks.
- Vercel – hosting infrastructure and edge network.
- fal and Replicate – AI inference for workflows routed to their hosted models.
- Model providers identified by the selected workflow – applicable upstream model processing terms may apply.
AI processing and model training
Image to Layers does not use your uploaded content to train its own models.
When a workflow uses a third-party AI provider, the relevant file, prompt, and job data may be sent to that provider to perform the requested processing. Provider retention, training, and regional-processing terms depend on the provider and model used.
Your rights
You keep full control of your content. You can manually delete your uploaded and generated images at any time from your dashboard, and the underlying files are permanently removed from storage. Anything you do not delete yourself is automatically erased at the end of its retention window (7 days on the free tier).
You may also contact us to:
- Access or correct your profile information.
- Delete your account and all associated data (except invoices required by law).
- Receive a machine-readable export of your account data.
- Exercise your GDPR right to erasure or CCPA right to delete.
Email support@imagetolayers.com for any privacy request. We respond within 7 days.