Privacy Policy.

Last updated: April 30, 2026

1. Data Controller

ProductImageFix is operated by Brandonn – Sole Proprietor, 8 Ruelle Boulot, 97400 Saint-Denis, France.

Contact email: contact@productimagefix.com

For the purposes of applicable data protection law, including the GDPR, the operator acts as data controller for the personal data processed through the website and Service.

2. Categories of Personal Data We Collect

Depending on how you use the Service, we may collect and process the following categories of personal data:

• Account data: email address, password hash, internal user identifier, authentication status, account settings, credit balance, subscription status, and account activity.
• Billing and transaction data: purchase history, selected packs or subscriptions, invoices, invoice identifiers, billing status, payment metadata, tax-related information, and payment provider identifiers.
• Billing contact details: name, company name where applicable, billing address, country, postal code, city, tax information where applicable, and any other information required to issue invoices or comply with accounting and tax obligations.
• Technical data: IP address, device and browser information, operating system, approximate location inferred from IP address, request logs, security logs, timestamps, timezone data, referrer data, and error logs.
• Visitor data: IP addresses of visitors, pages viewed, public test usage, cookie or local storage identifiers, and basic traffic information.
• Image and job data: uploaded product images, processed images, thumbnails, previews, downloadable files, ZIP archives, filenames, file metadata, processing status, job identifiers, and download records.
• Usage data: features used, number of images uploaded, number of images processed, credit consumption, result downloads, failed jobs, account actions, and interface preferences.
• Support and communication data: messages sent through contact forms, support emails, legal requests, billing requests, and related correspondence.
• Cookie and consent data: cookie preferences, consent records, session identifiers, and similar technical identifiers.

3. Purposes of Processing

We process personal data for the following purposes:

• creating, authenticating, and managing user accounts;
• providing the image processing service, including upload, conversion, background cleaning, centering, square-format output, previews, downloads, and batch processing;
• storing product images and processed results until automatic expiration or until the user deletes them through the interface;
• managing image credits, free public tests, paid packs, subscription credits, rollover limits, and credit consumption;
• processing payments, subscriptions, invoices, refunds, chargebacks, and billing support;
• storing billing contact details and addresses for invoicing, accounting, tax compliance, and fraud prevention;
• securing the Service, detecting abuse, preventing fraud, limiting automated misuse, and protecting accounts;
• recording visitor IP addresses and technical logs for security, troubleshooting, abuse prevention, and service reliability;
• providing customer support, responding to legal requests, and handling disputes;
• maintaining, debugging, improving, and monitoring the Service;
• complying with legal, tax, accounting, regulatory, and evidentiary obligations;
• measuring traffic and improving the website, subject to applicable cookie and consent rules.

4. Legal Bases Under the GDPR

Depending on the purpose of processing, we rely on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to provide the Service, manage your account, process your images, deliver downloads, manage credits, or provide paid features.
• Legal obligations: where processing is necessary for accounting, invoicing, tax compliance, consumer law obligations, fraud reporting, or responses to competent authorities.
• Legitimate interests: including service security, fraud prevention, abuse prevention, troubleshooting, IP logging, dispute handling, service reliability, and protection of the operator’s legal rights.
• Consent: where required by law, including for certain analytics cookies, non-essential trackers, or optional communications.

5. Product Images and Processed Results

When you upload product images, the Service stores and processes them in order to create the requested output files, such as clean product images, white-background versions, square-format images, previews, thumbnails, or downloadable archives.

Product images and processed results are stored until their automatic expiration, or until you decide to delete them from the interface, unless longer retention is necessary for security, fraud prevention, legal compliance, dispute handling, backup management, or evidence preservation.

You remain responsible for ensuring that you have the right to upload and process the images you submit, including where they contain products, packaging, logos, trademarks, copyrighted material, personal data, or confidential information.

6. Billing Data and Addresses

When you make a purchase, subscribe to a plan, request an invoice, or access billing features, we may process billing details such as your name, company name, billing address, country, postal code, city, tax information, purchase history, invoice information, and payment-related metadata.

These details are used to process purchases, issue invoices, manage subscriptions, comply with accounting and tax obligations, prevent fraud, resolve payment disputes, and provide billing support.

Full payment card details are handled by the payment provider and are not stored by ProductImageFix.

7. Visitor IP Addresses and Logs

We store visitor IP addresses and technical logs when users access the website or use the Service.

IP addresses and logs may be used for security, fraud prevention, abuse detection, rate limiting, public free test limits, troubleshooting, service reliability, legal compliance, and dispute handling.

IP addresses may also be processed by hosting, security, analytics, payment, or infrastructure providers where necessary to operate and protect the Service.

8. Payments

Payments are processed by third-party payment providers, including Stripe or any other provider made available through the website.

ProductImageFix does not store full payment card data. Payment data is processed according to the payment provider’s own contractual framework, privacy policy, security rules, and legal obligations.

We may receive and store payment-related metadata, such as payment status, subscription status, customer identifier, invoice identifier, transaction identifier, purchased pack, billing period, amount, currency, and refund or chargeback status.

9. Recipients or Categories of Recipients

Personal data may be disclosed, on a need-to-know basis, to:

• hosting providers and infrastructure providers;
• storage providers and content delivery networks;
• image processing infrastructure and technical service providers;
• payment providers and billing-related service providers;
• email delivery providers and customer support tools;
• analytics, monitoring, logging, anti-fraud, and security providers;
• professional advisers, accountants, legal advisers, insurers, courts, authorities, or competent bodies where legally required or reasonably necessary to protect rights, safety, or legal interests.

Personal data is not sold to advertisers.

10. International Data Transfers

Some service providers may be located outside the European Economic Area, or may process data from outside the European Economic Area.

Where applicable, such transfers are carried out using appropriate safeguards required by law, which may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

11. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, subject to legal, accounting, tax, evidentiary, security, backup, and dispute-handling requirements.

• Account data: retained while the account remains active and for a limited period thereafter where necessary for legal, security, accounting, or dispute-handling reasons.
• Billing, invoice, transaction, and address data: retained for the period required by applicable accounting, tax, consumer, and commercial law.
• Uploaded product images and processed results: retained until automatic expiration or until deletion by the user through the interface, unless longer retention is necessary for legal compliance, fraud prevention, dispute handling, security, backup management, or evidence preservation.
• Downloadable archives, previews, and thumbnails: retained according to the same logic as the related processed results, unless deleted earlier or retained for technical reasons.
• Technical logs and IP addresses: retained for a limited duration appropriate to security, anti-fraud, abuse prevention, troubleshooting, and evidentiary needs.
• Support and communication data: retained for the time necessary to handle the request and for a limited period thereafter for dispute handling, legal compliance, and service quality.
• Cookie and consent records: retained according to applicable cookie rules and consent management requirements.

12. Backups and Deletion Limits

When you delete images or account-related data from the interface, the active version is removed or made unavailable according to the Service’s technical deletion process.

However, residual copies may remain temporarily in backups, logs, caches, archives, or security records until they are overwritten or expire according to the applicable retention cycle.

Certain data may also be retained where necessary to comply with legal obligations, enforce contractual rights, prevent fraud, resolve disputes, protect security, or respond to competent authorities.

13. Your Rights

Subject to the conditions and limits provided by applicable law, you may have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object, in certain cases, to processing based on legitimate interests;
• right to withdraw consent at any time where processing is based on consent;
• right to define instructions regarding the fate of your personal data after death, where applicable under French law.

To exercise your rights, you may contact: contact@productimagefix.com

We may need to verify your identity before responding to certain requests.

14. Right to Lodge a Complaint

If you believe that your personal data has been processed in breach of applicable data protection law, you may lodge a complaint with the competent supervisory authority.

In France, this authority is the CNIL.

15. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, unlawful disclosure, and misuse.

These measures may include access controls, authentication mechanisms, HTTPS, server-side security controls, logging, monitoring, backups, and anti-abuse measures.

However, no system, server, storage method, or transmission method can be guaranteed to be completely secure.

16. Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies for authentication, security, CSRF protection, fraud prevention, free public test limits, credit display, service preferences, traffic measurement, analytics, and technical operation.

Where required by law, non-essential cookies or trackers are used only on the basis of valid consent.

For more information, please consult the Cookie Policy.

17. Children

The Service is not intended for children. Users must be legally capable of using the Service and entering into binding agreements, especially where purchases, subscriptions, or commercial use are involved.

If you believe that a child has provided personal data through the Service, please contact us so that appropriate action can be taken.

18. Changes to this Policy

We may update this Privacy Policy at any time to reflect changes in the Service, legal requirements, technical infrastructure, or data processing practices.

The version published on this page is the version currently applicable.