Free plan includes all core tools. Pro unlocks API and bulk workflows. See plans

Legal

Privacy Policy

Last updated: March 2, 2026

This Privacy Policy explains how EXIFCut ("we", "us", "our") collects, uses, and protects information when you use our website, dashboard, API, and image metadata tools (the "Service").

1. Information We Collect

Account data: name, email address, authentication identifiers, subscription plan, and account settings.

Uploaded files and metadata: images and metadata you submit for processing. Files are retained for up to 24 hours to support downloads and history.

Billing data: payment and subscription records are handled by Stripe. We do not store full card details on our servers.

Usage and device data: logs, browser/device signals, and analytics events collected through Google Tag Manager and Google Analytics.

2. How We Use Information

  • Provide and operate the Service, including image metadata processing and downloads.
  • Authenticate users, enforce usage limits, and secure accounts.
  • Process subscriptions, invoices, and payment-related operations.
  • Improve product quality, reliability, and conversion through analytics and event measurement.
  • Respond to support, feedback, and feature requests.

3. Data Retention

Processed files are generally available for download for 24 hours, then soft-deleted and no longer available to users.

Account and billing records may be retained as required for security, compliance, legal obligations, and fraud prevention.

Analytics data is retained according to your consent choices and analytics platform settings.

4. Sharing and Processors

We share data with service providers strictly to operate the Service, including cloud hosting/storage (Google Cloud), payments (Stripe), and analytics (Google Analytics via GTM).

We may also disclose information when required by law, legal process, or to protect rights, security, and platform integrity.

5. Security

We apply technical and organizational safeguards to protect information, including encrypted transport, access controls, and operational monitoring. No internet service can be guaranteed 100% secure.

6. Your Choices and Rights

You can update account information in your dashboard, request account deletion, and contact us for data access or correction requests.

You can control analytics and advertising cookies via browser settings and consent preferences where applicable.

7. Children

The Service is not directed to children under 13. If you believe a child has provided personal data, contact us and we will investigate and remove the data where required.

8. Contact

For privacy requests or questions, contact us through Feedback.