Privacy Policy

Last updated: May 28, 2026

This page explains how ImageFit AI handles account, image, credit, payment, and anti-abuse data.

1. Overview

ImageFit AI is an AI image expansion and social media resizing tool available at expand.aiimagetools.cn. This Privacy Policy explains how we collect, use, share, and retain information when you create an account, upload images, generate expanded results, buy credits or subscriptions, or contact us.

By using the service, you understand that uploaded images may be processed by our systems and by third-party AI providers so we can provide image expansion results.

We do not sell personal information.

2. Information We Collect

Account and authentication data

  • Email address, name, password authentication records, email verification status, login sessions, and account settings.
  • If you sign in with Google OAuth, we receive basic Google account information such as your email address, name, profile image, and verification status as permitted by Google and your consent.

Images and generation data

  • Images you upload, generated image results, selected platform ratios, candidate counts, download/history records, and related generation status.
  • Image files and generated results may be stored in Cloudflare R2 or a similar object storage provider so you can view history and download results again.

Credits, billing, and transaction data

  • Credit balances, credit ledger records, credit grants, usage deductions, refunds, subscription status, payment records, and product or plan selections.
  • Creem processes payments, subscriptions, refunds, disputes, and related checkout information. We do not store full payment card details on our servers.

Security and anti-abuse data

  • IP address, user agent, session cookies, auth cookies, anonymous device identifiers, normalized email values, registration bonus guard records, usage rate limit records, and account risk status.
  • If a refund, dispute, suspicious activity, or policy violation occurs, we may restrict account access or generation features to protect the service.

Support and communications

  • Messages submitted through the contact form, support requests, email delivery status, and related communication records.

3. How We Use Information

  • Create, verify, and secure user accounts.
  • Provide Google OAuth login and email/password login.
  • We use Google account information only for authentication, account creation, account security, and profile display. We do not sell Google user data or use it for advertising.
  • Process uploaded images and generate expanded images for social media formats such as RedNote, Instagram, Pinterest, TikTok, Reels, and Shorts.
  • Show generation history, candidate results, downloads, and credit usage.
  • Deduct, refund, expire, and audit credits across free bonuses, subscriptions, and one-time purchases.
  • Manage checkout, subscriptions, refunds, disputes, and customer entitlements.
  • Send verification emails, system notices, support replies, and product-related service messages.
  • Prevent abuse, repeated bonus claims, high-frequency generation, payment fraud, and unauthorized access.
  • Maintain, debug, improve, and secure the service.

4. Third-Party Services

We use service providers to operate the product. The categories below describe the services we may use, with current or representative vendors as examples. These providers process information only as needed to provide their services to us, subject to their own terms and privacy practices.

  • Authentication providers, for example Google OAuth, for optional Google sign-in.
  • Payment processors, for example Creem, for checkout, payments, subscriptions, refunds, and disputes.
  • Email delivery providers, for example Resend, for verification emails and system emails.
  • Object storage providers, for example Cloudflare R2 or similar storage, for uploaded and generated image files.
  • AI model providers, for example the configured third-party AI image generation or editing provider, for image expansion processing.
  • Database and application infrastructure providers, for example Neon/Postgres and Vercel, for account, credit, billing, subscription, generation history, hosting, and application infrastructure.

5. Images and AI Processing

Uploaded images and generated results are used to provide the image expansion workflow you request. Depending on the selected provider and storage settings, images may be sent to third-party AI services and stored in object storage.

Please do not upload images that you do not have the right to use, or images containing sensitive personal information unless you are comfortable with that processing for the purpose of generating results.

You may contact us to request deletion of account-related uploaded or generated images, subject to technical, legal, fraud-prevention, or backup retention limits.

6. Cookies and Device Identifiers

We use cookies and similar technologies for authentication, session management, localization, security, and abuse prevention. We may also use an anonymous device identifier to help limit repeated free-credit abuse. You can control many cookies through your browser settings, but some cookies are required for login and core account features.

7. Data Retention

  • Account data is retained while your account remains active, unless deletion is requested and no longer retention is required.
  • Payment, credit ledger, credit grant, subscription, refund, and dispute records may be retained for accounting, customer support, legal, and fraud-prevention purposes.
  • Uploaded and generated images may be retained while history/download features are available, unless you request deletion or the product removes them under retention rules.
  • Security logs and anti-abuse records may be retained for a reasonable period to protect the service and investigate misuse.
  • Backups and infrastructure logs may persist for a limited time before deletion or rotation.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information we hold about you. You may also request account deletion or ask us to remove uploaded/generated images associated with your account.

Some records, such as payment, ledger, refund, dispute, security, or abuse-prevention records, may need to be retained where required for legitimate business, legal, accounting, or fraud-prevention purposes.

9. Security

We use technical and organizational safeguards designed to protect user data, including access controls, transport encryption, and provider security controls. No online service can be guaranteed to be completely secure, so you should use a strong password and protect access to your email account.

10. Children

The service is not intended for children under 13. If you believe a child has provided personal information to us, please contact us so we can review and take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy when our product, providers, legal requirements, or data practices change. The latest version will be posted on this page with an updated date.

12. Contact Us

If you have questions about this Privacy Policy, our use of Google user data, account deletion, or image deletion requests, contact us:

View Cookie Policy · View Terms of Service

ImageFit AI logo
Copyright © 2026 ImageFit AI
All rights reserved
Subscribe to Newsletter

ImageFit AI