Privacy & your data

The short version, in plain language. The full Privacy Policy, Terms of Service, Acceptable Use Policy and Copyright Policy are the documents that count. Open-source notices are here.

Signed out: we do not keep the photo you upload

Your image is decoded into memory, converted, and discarded when the request finishes. It is never written to a file on our servers. An automated test fails our build if anyone adds code that would save it.

Signed in: we hold it for up to an hour, then delete it

Signed-in conversions run through a queue, so a reduced-size copy of your photo waits in private storage until the conversion finishes or fails -- normally seconds to minutes, and never more than about an hour. It is deleted at that moment, and a daily sweep removes anything that slipped through. Camera metadata, including location, is stripped before the image goes anywhere.

Every photo and description is sent to outside AI providers

We do not run the AI models ourselves. Each upload is checked by OpenAI's moderation service and Google Cloud Vision SafeSearch, then converted by OpenAI's image model, by Google Gemini if OpenAI declines, or by an open model hosted at fal.ai if both decline. Descriptions you type go to OpenAI and, as a fallback, xAI. None of them may use your content to train their models. The full list, and what each one keeps, is in the Privacy Policy.

The finished page is cached for 7 days — and the cache is shared

We keep each finished page for 7 days, indexed by a fingerprint of the image it came from, so converting the same picture twice is instant. Two people who upload the identical file get the same cached page. Your own photos never match anyone else's.

Signed in: your pages stay in your library until you delete them

Every page you make while signed in is saved privately to your account, along with a short searchable description of the drawing (never the photo). A page made from a description keeps that description as its title. Delete a page, or your account, and it is gone.

Please think twice about photos of children

Accounts are for adults; children are welcome to help you choose. A photo of a recognisable child is still sent to outside AI providers to be converted. We would rather you used a drawing, a pet or an object. Teachers: your school may require written parental permission first, and its rules govern.

No ads, no tracking

There is no advertising and no analytics on the site, and no advertising cookies or identifiers. We do not sell or share your personal information. If that ever changes, the Privacy Policy is updated first.

Deleting your data

Delete any page from your library at any time. Delete your account from the account page: it is deactivated at once and finally deleted after 30 days. To purge a cached page without an account, or to ask for a copy of your data, email privacy@colorapicture.com, or ask us.