Privacy policy

1. Who we are and what this covers

This policy explains what we do with personal data when you use removepeople.ai. We are the data controller for account, billing, support and analytics data, and we are based in the United Kingdom. For the photos you upload we act only on your instructions, to produce the edit you asked for. Any questions, or to exercise a right: [email protected].

2. Your photos — the short version

This is the part most people came here for, so it goes first.

• We never store your photos. Your image is held in memory only for as long as the edit takes, and is never written to a disk or a database of ours. There is no photo library in your account, because there is nothing to put in one.
• We never train on your photos. Not our models, not anyone else’s. Not for evaluation, not for marketing, not for examples on the site — every before/after you see on removepeople.ai was generated by us for that purpose.
• Location data is removed before your photo leaves your device. Your browser strips the EXIF metadata — including GPS coordinates, camera details and timestamps — and resizes the image before anything is uploaded.
• Detecting people happens on your device. When we show you how many people we can see in your photo, that runs inside your browser. No image is sent anywhere for it.
• We do not recognise faces. We do not identify anyone, match anyone against anything, or create or hold biometric data.

To produce an edit, your image is sent to the AI provider that runs the removal, under a contract that forbids using it for training or any purpose other than returning the result. It is not retained there for our benefit and we hold no copy afterwards.

3. What we do collect

• Account: your email address, and the name and profile picture your sign-in provider gives us. We never see or hold a password.
• Subscription: which plan you are on, your credit balance and usage count, renewal dates, and a reference to your customer record with our payment processor. Card details go to the processor and never reach us — we cannot see your full card number.
• Technical and security logs: IP address, timestamps, approximate country from IP, browser and device type, and error diagnostics. These keep the Service running and stop abuse and card fraud.
• Support: anything you send us by email, including attachments, and our replies.
• Analytics, only with your consent: which pages and features get used, and where an edit was abandoned. See cookies and analytics.

4. Why we use it, and our legal basis

• To run the Service — produce your edits, manage your account and credits. Basis: performing our contract with you.
• To take payment, invoice and prevent fraud. Basis: contract; our legitimate interest in not being defrauded; legal obligations for tax and accounting.
• To keep the Service secure — rate limits, abuse detection, incident response. Basis: our legitimate interest in a service that isn’t abused, and legal obligation.
• To fix and improve it. Basis: legitimate interest for error diagnostics; your consent for analytics.
• To email you about your account and subscription. Basis: contract. Marketing email is consent only and always has a one-click unsubscribe.
• To comply with the law and to establish or defend legal claims. Basis: legal obligation; legitimate interest.

5. We do not sell your data

We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined by the California Privacy Rights Act. We do not run advertising trackers on this site. If that ever changed we would say so here first and give you a working opt-out, and we honour Global Privacy Control signals where they apply.

6. Who else processes it

We use a small number of established providers to run the Service: hosting and infrastructure, database and sign-in, the AI provider that performs the removal, payments and fraud prevention, error monitoring, product analytics (only if you consent), and email delivery. Each acts under contract, on our instructions, and for no purpose of its own. We may also disclose data where the law requires it, to protect people’s safety or our rights, or as part of a business transfer — in which case this policy continues to apply. We will name any specific provider on request to [email protected].

7. International transfers

We operate from the UK, and some providers are outside the UK and EEA, including in the United States. Where data is transferred we rely on lawful transfer mechanisms — the UK International Data Transfer Agreement or Addendum, and the EU Standard Contractual Clauses — with additional safeguards where needed.

8. Security

Everything is encrypted in transit with TLS, and stored data is encrypted at rest. Access to production systems is limited to those who need it, and we keep an incident response process. Not storing photos is itself the strongest security measure here: the most sensitive thing you give us is the thing we never keep. No system is perfectly secure, and we will not claim otherwise.

9. How long we keep things

• Photos and edits: not kept. They exist only for the seconds the edit takes.
• Account and subscription data: while your account is open, and then deleted when you close it — see your rights.
• Technical and security logs: typically up to 12 months.
• Billing records and invoices: as long as tax and accounting law requires — six years in the UK. This is why closing an account does not erase the record that a payment happened.
• Support emails: up to two years, so we have the history if you come back to us.

10. Your rights

In the UK and EU you can ask for access to your data, and for it to be corrected, deleted, restricted or provided in a portable form; you can object to processing based on legitimate interests; and you can withdraw consent at any time.

In US states with privacy laws (including California, Colorado, Connecticut, Virginia and Utah) you can request access to, correction of, or deletion of your data, and appeal if we refuse.

Deleting your account is self-serve from your account settings, and removes your profile, credits and usage history. Cancel your subscription first — deleting while a plan is live would leave you being billed for an account that no longer exists, so we ask you to do them as two deliberate steps. You can also email [email protected] and we will handle it. We may need to verify who you are, and we confirm by email once it is done — within 30 days at the outside, and normally far sooner.

Complaints. Please come to us first at [email protected] so we can try to fix it. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

11. Cookies and analytics

We use the minimum that works. Strictly necessary storage keeps you signed in and keeps the site secure, and is always on. Beyond that there is exactly one optional category — analytics — and we set nothing in it until you say yes.

Our notice has one accept button and one decline button of equal weight, no hidden “manage preferences” maze, and no pre-ticked boxes. Declining is as easy as accepting and costs you nothing. If you decline, or simply ignore the notice, no analytics script is loaded at all — we do not load it and then withhold events. You can change your mind at any time from the notice.

If you accept, we load Google Analytics 4 and Microsoft Clarity. Error monitoring (Sentry) is separate: it is on for everyone because it is how we keep the Service working, and it is configured not to send your email address.

12. Automated decisions

We do not make automated decisions about you that produce legal or similarly significant effects. The AI edits an image; it does not make decisions about people.

13. Children

The Service is for people aged 18 and over. It is not directed at children and we do not knowingly collect their data. If you believe a child has given us data, email [email protected] and we will delete it.

14. Business customers

If you use the Service as a business and are a controller in your own right, our Data Processing Addendum — including the UK Addendum and EU Standard Contractual Clauses — is available on request at [email protected], and forms part of our terms once signed.

15. If something goes wrong

We keep an incident response process, and where the law requires it we will notify the relevant authority and affected users of a personal data breach without undue delay.

16. Changes to this policy

We may update this policy. The new version goes here with the date at the top updated, and if a change materially affects how we handle your data we will email you about it.

17. Contact

Email [email protected] — a person reads it.