1. Introduction
Picture to Drawing ("we", "us") provides an online tool that turns photos into drawing-style images at https://picturetodrawing.online/. This Privacy Policy explains what information we process when you use the tool.
2. Information We Process
- Images you upload: used to create your drawing result and stored privately with that result for the limited retention period described in section 11 below.
- Generated results: the drawing image you create is returned to your browser for preview and download. We store the generated result and its uploaded original privately for the limited retention period described in section 11 below.
- Feedback you submit: your selected feedback type, message, optional email or handle, and submission time are stored so we can review and respond to feedback.
- Google account information: when you sign in, Google provides your account identifier, verified email address, display name, and profile image URL. We use these details to create and secure your account.
- Billing information: when you make a purchase, we receive transaction, product, customer, subscription, refund, and dispute identifiers and status information from Creem. We do not receive or store your full payment-card number.
- Usage data: pages visited, approximate location, device and browser type, collected by our analytics providers to understand how the site is used and to improve it.
3. Sign-in Provider
We use Google OAuth to authenticate users. Google processes the sign-in request under its Privacy Policy. We store a hashed session token in our database and set an essential HttpOnly session cookie in your browser. We do not receive or store your Google password.
4. Payment Provider
Creem acts as the Merchant of Record for paid purchases. Creem processes checkout information, payment details, taxes, receipts, subscriptions, refunds, and chargebacks under its Privacy Policy. We store the minimum transaction and subscription records needed to grant credits, prevent duplicate fulfillment, provide billing support, and maintain account balances. We may also use Creem's experimental moderation service to screen our internal drawing-style prompt before generation. That moderation request does not include the uploaded image, image URL, filename, or other image content.
5. Analytics Providers
We use the following analytics services:
Where you are determines how these services start. In the European Union, the European Economic Area, the United Kingdom, and Switzerland, Google Analytics cookies and Microsoft Clarity are used only after you choose "Accept Analytics". Before you make a choice there, Google Analytics may receive anonymous signals that do not use cookies, which we use for aggregated statistics. If you reject, nothing further is sent to Google Analytics and Clarity does not load. In the United States and other regions, analytics are on by default, and you can turn them off at any time through "Analytics Settings" in the footer. Whatever your region, we do not use Google Analytics for advertising: advertising storage, ad user data, and ad personalization are always denied. We detect your approximate country from your request to decide which of these applies; we do not store it for this purpose.
- Plausible Analytics: https://plausible.io/privacy. Plausible provides privacy-friendly, cookie-less analytics that does not collect personal data.
- Google Analytics: https://policies.google.com/privacy. Google Analytics collects aggregated usage statistics such as page views, session duration, and approximate country. We use it with Google Consent Mode, so its use of cookies follows the choice described above.
- Microsoft Clarity: https://privacy.microsoft.com/. Microsoft Clarity records mouse movements, clicks, and scroll behavior to help us understand how users interact with the tool. Clarity loads only while analytics are allowed for you. We use Clarity's supported masking configuration for the file input, uploaded-image previews, generated-result image area, and message area. Content inside those masked areas is not recorded in Clarity session recordings.
6. Image Processing and Storage
Uploaded images are sent to a third-party image processing service to generate your drawing result. We do not use your images for any purpose other than providing the tool. After a successful generation, we store the uploaded original and generated result together in private Cloudflare R2 object storage for the applicable retention period. Signed-in users can view or download the generated result and delete the stored image pair from their dashboard. Authorized administrators can review the private input/output pair to operate and support the service. For details about how the processing provider handles images, please contact us.
9. Legal Bases for Processing
Where data-protection law requires a legal basis, we process account, image-generation, credit, and billing information to perform our contract with you; Google Analytics and Microsoft Clarity data with your consent where consent is required (the European Union, the European Economic Area, the United Kingdom, and Switzerland) and, elsewhere, for our legitimate interest in understanding and improving the site, subject to your right to turn analytics off; service-security, fraud-prevention, support, and product-improvement data for our legitimate interests; and transaction records where needed to comply with legal obligations. You may withdraw analytics consent at any time through Analytics Settings.
10. International Data Transfers
Our providers may process information in countries other than your own. Where required, transfers are handled under applicable safeguards used by the relevant provider, such as approved contractual protections. Creem separately handles payment data as Merchant of Record under its own privacy terms.
11. Data Retention
OAuth state records expire after 10 minutes, and sign-in sessions expire after 30 days unless ended earlier. Uploaded original images and generated result images are retained as a pair for 24 hours for accounts without an active subscription, including accounts that have purchased a one-time credit pack, 3 days for Starter and Creator subscriptions, and 7 days for Pro subscriptions. The applicable period is set when the result is created. You can delete a saved image pair from your dashboard before its retention period ends. Expired images are hidden from the dashboard at the end of that period and are deleted from private object storage through lifecycle processing, which may complete up to 24 hours later. Account, credit, transaction, and subscription records are kept while needed to operate your account, prevent fraud, resolve disputes, and meet legal or accounting obligations. You may request access, correction, or deletion by contacting us. Some billing records may need to be retained where required by law.
12. Security
We use reasonable technical and organizational measures designed to protect account and transaction records, including encrypted transport, HttpOnly session cookies, hashed session tokens, server-side payment credentials, and signed payment webhooks. No online service can guarantee absolute security.
13. Your Privacy Rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection to certain processing, and to withdraw consent. You may also have a right to complain to a local data-protection authority. To make a request, email us from the address associated with your account. We may need to verify the request before acting, and some records may be retained where legally required.
14. Children's Privacy
Our service is not directed to children under 13, and we do not knowingly collect their personal information.
15. Changes to This Policy
We may update this Privacy Policy when our practices, providers, or legal obligations change. The date at the top shows the latest revision. Material changes will be presented through the site or another appropriate notice when required.
16. Contact
If you have questions about this policy, contact us at support@picturetodrawing.online.