Privacy Policy

1. Scope and who controls your information

This Privacy Policy applies to the CiciGPT website and AI photo-editing experience (the “Service”). In this policy, “CiciGPT,” “we,” “us,” and “our” refer to the operator of the Service.

This policy does not cover websites, applications, or services operated independently by third parties. Their own terms and privacy policies apply when you use them.

2. Information we process

Content you choose to submit

When you select Generate, the Service processes the image or images you upload, your editing prompt, selected aspect ratio, output format, resolution settings, and the resulting image. Uploaded files may contain metadata or personal information visible in the image.

Account and technical information

• If you use an authenticated feature, an authorization token may be read from local storage, session storage, or a cookie and sent to the processing API.
• Servers and infrastructure providers may automatically receive IP address, request time, browser type, device information, browser fingerprint, referring page, and diagnostic or security logs.

Analytics information

If Google Analytics is enabled for the deployment, it may collect usage statistics, approximate location, browser and device information, and a client identifier. Analytics is disabled when no measurement ID is configured.

3. How we use information

We use information to provide and operate image editing, return generated results, maintain daily limits, prevent fraud and automated abuse, diagnose errors, protect the Service, understand aggregate usage when analytics is enabled, and comply with legal obligations.

We do not use uploaded images, prompts, or generated results for advertising or to train AI models. Service providers processing content on our behalf are not permitted to use submitted content for model training.

4. Service providers and model disclosure

Image-processing providers

To generate an edit, CiciGPT uses Google Nano Banana and sends the submitted images, prompt, generation settings, and any authorization or verification token needed to trusted service providers acting on our behalf. These providers may process this information to provide, secure, troubleshoot, and support the requested Service. Processing may occur in countries other than your own and may be subject to the providers’ own privacy terms.

Cloudflare Turnstile

Anonymous generation may use Cloudflare Turnstile to distinguish people from automated traffic. Turnstile processes browser and interaction signals needed for that security function. Learn more in Cloudflare’s Turnstile Privacy Addendum.

Google Analytics

When enabled, Google Analytics helps measure site usage. Google explains its default data collection and client identifier practices in its Analytics data collection documentation.

We may also disclose information when required by law, to protect users or the Service, to investigate abuse, or as part of a merger, acquisition, financing, or transfer of the Service, subject to applicable law.

5. Content moderation and legal disclosures

Before an image is generated, automated safety systems may evaluate the prompt and uploaded images for prohibited or unsafe content. A request may be blocked when a safety check detects a possible violation. Information related to flagged requests, user reports, suspected abuse, or legal process may be accessed by authorized personnel when reasonably necessary to review, enforce our Terms, protect users, or comply with law.

If you report content or a rights violation to [email protected], we may process your message, contact details, the reported URL or identifier, supporting information, and the result of our review. We may share relevant information with service providers, legal advisers, or authorities when necessary to investigate abuse, respond to a valid legal request, or protect people and the Service.

We do not use uploaded images, prompts, or generated results for advertising or to train AI models. Service providers processing content on our behalf are not permitted by our instructions to use submitted content for model training. We may retain limited records needed to enforce our Terms, resolve disputes, prevent repeated abuse, or meet legal obligations.

6. Local storage, cookies, and retention

The Service may use browser storage or cookies for essential functions such as authentication, preferences, service integrity, and security. Cloudflare Turnstile and Google Analytics, when enabled, may use their own cookies or similar technologies as described in their policies.

The website client does not define or verify a fixed server-side retention schedule for uploaded images, prompts, generated results, or processing logs. Files and records may remain on processing or infrastructure systems for an unspecified period. Avoid sensitive uploads until a confirmed retention and deletion schedule is published.

You can clear local storage and cookies through your browser. Doing so may reset anonymous usage state, sign you out, or require another security verification.

7. Your rights and choices

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning personal information, and to appeal or complain to a supervisory authority.

• You may choose not to upload an image or submit a generation request.
• You may clear locally stored identifiers through browser settings.
• You may use browser privacy controls or extensions to limit optional analytics, where available.
• Requests about provider-controlled data may also need to be directed to the applicable provider.

8. Security, international processing, and children

We use reasonable technical and organizational measures intended to protect the Service, but no transmission or storage method is completely secure. Submitted information may be processed in countries other than your own, where privacy laws may differ.

The Service is not directed to children under 13, or the higher minimum age required by local law. Do not submit images of children unless you are authorized to do so and the use is lawful and appropriate.

9. Changes and contact

We may update this policy as the Service, providers, or legal requirements change. The “Last updated” date shows when this version was revised. Material changes may also be highlighted on the Service.

For privacy questions or rights requests, contact us at [email protected].