Legal

Privacy policy

Last updated: 1 March 2026

Images you send

Uploaded images are decoded in memory, classified, and discarded when the response is returned. They are not written to disk, not used for training, and not shared with third parties.

Account data

We store your email, display name, role and account creation time so you can sign in and we can attribute usage. Authentication is handled by Firebase Auth; we never see your password.

API keys

Keys are stored only as SHA-256 hashes alongside a short display prefix. We cannot recover a lost key — regenerate it instead.

Usage logs

For each request we record a timestamp, the endpoint, the response status and the key that made it. This powers your dashboard analytics and quota enforcement. No image content is logged.

Payments

Razorpay processes payments and holds the card data; we receive only the order and payment identifiers needed to activate your plan.

Retention and deletion

Usage logs are retained for 12 months. Deleting your account from the dashboard removes your profile, keys and subscriptions; anonymised aggregate counts may remain in billing records.

Contact

Questions or data requests: privacy@safeframe.dev. We respond within 30 days.