BeautyAI

AI color studio
Legal

Privacy Policy

Effective date: November 10, 2026 · Last updated: November 10, 2026

This Privacy Policy explains how BeautyAI ("BeautyAI", "we", "us") collects, uses, and shares information when you use ibeautyai.com and our AI image editing tools.

1. Information we collect

  • Account information: your email address, login codes, account ID, and credit balance.
  • Generation information: the tool you use, selected colors and points, output size, timestamps, credit cost, and generation status.
  • Images you submit: images are transmitted to our processing service and to third-party AI model providers so we can produce the requested edit. We do not store your uploaded image bytes on our servers.
  • Payment information: payments are processed by Creem. We receive order status, email, amount, currency, and credits purchased. We do not receive or store full card numbers.
  • Local browser data: your login token and generation history may be stored in your browser's localStorage or IndexedDB so the app can keep you signed in and show your history.
  • Technical data: IP address, request time, browser type, and error logs used for security, rate limiting, and debugging.

2. How we use information

  • To create and secure your account, send login codes, and maintain your credit balance.
  • To provide image generation, return results, and store your local history in your browser.
  • To process payments, prevent fraud, and comply with legal and tax obligations.
  • To enforce our Terms of Service and Acceptable Use Policy, including content moderation.
  • To operate, maintain, and improve the service, and to respond to support requests.

3. Image processing and third-party AI providers

When you request a generation, your image and instructions are sent through our API to third-party AI model providers, including Volcengine Ark (Seedream), for processing. These providers process the image to return the edited result. We do not keep a permanent copy of your uploaded image on our servers. The generated result is delivered as a time-limited URL that expires after approximately 24 hours; your browser may keep a local copy in IndexedDB so you can view your history.

Do not upload images of other people unless you have their permission. Do not upload images containing minors, nudity, or content that violates our Acceptable Use Policy.

4. Payments

Creem acts as our merchant of record for purchases. Creem collects and processes payment details, calculates and remits applicable taxes, issues invoices, and handles fraud screening and chargebacks. Your payment data is governed by Creem's privacy policy. We receive only the information needed to credit your account.

5. Cookies and local storage

We use localStorage to keep your login token and basic interface preferences, and IndexedDB to store your generation history in your browser. We do not use advertising cookies or third-party tracking pixels. You can clear this data through your browser settings; clearing it may sign you out and remove local history.

6. Data retention

  • Login codes expire after 10 minutes.
  • Generated result URLs expire after approximately 24 hours.
  • Uploaded image bytes are not retained on our servers.
  • Account, credit, purchase, and generation records are kept while your account is active and as long as needed for legal, tax, fraud-prevention, and dispute-resolution purposes.
  • Browser history remains on your device until you clear it or the app removes it.

7. Sharing information

We share information only with service providers that help us operate the service, including:

  • Cloudflare: hosting, database, and edge infrastructure.
  • Volcengine Ark (Seedream): third-party AI image generation.
  • Creem: payment processing, merchant-of-record services, tax, invoices, and moderation.
  • Resend: delivery of login emails.
  • Authorities: when required by law, legal process, or to protect rights, safety, and the integrity of the service.

We do not sell your personal information.

8. International transfers

Our service providers may process information in countries other than your own, including the United States and other regions where Cloudflare, Creem, Resend, and AI model providers operate. We take reasonable steps to ensure transfers are handled consistent with applicable law.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to certain processing. You can request deletion of your account and related data by contacting us. We may need to retain certain records for legal, tax, or fraud-prevention purposes.

To exercise these rights, email [email protected]. We will respond within a reasonable period.

10. Security

We use technical and organizational measures designed to protect your information, including encrypted transport, access controls, rate limiting, and credit-ledger safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Material changes may be communicated through the service or by email.

13. Contact

Questions or requests about privacy can be sent to [email protected]. We aim to respond within 3 business days.