Privacy Policy

Last updated: October 2, 2026

SiImageGen is an SI image generator at siimagegen.com, and this privacy policy describes how we handle personal data when you browse the site, sign in, write prompts, upload photos to edit and buy credits. SI stands for super intelligence, the technology formerly called AI. We have kept this privacy policy short and concrete: what we hold, who processes it, and when it is deleted.

What this privacy policy covers

This privacy policy applies to siimagegen.com, the Create workspace, the gift center and the emails we send. Sites of other companies you reach from our pages, such as Google and Stripe, have their own policies. In this privacy policy, “we” and “us” mean the SiImageGen team, and “you” means anyone who uses the site.

Information we collect

• Account details. Your email address. When you continue with Google, Google also passes us your name, profile photo and Google account ID.
• Prompts and images. The text you write, the reference photos you upload for editing (up to four per request, JPG, PNG or WebP, 10 MB at most), the images the models return, and the settings you chose: model, aspect ratio, quality and number of images. Before a photo leaves your device, your browser redraws it at up to 2048 pixels, which removes embedded metadata such as the camera model and the place it was taken.
• Credits and purchases. Your balance and every change to it: purchases, gifts, the cost of each generation and automatic refunds. For each order we store the pack, amount, currency, date, payment status and the confirmation Stripe sends us, which can include the name, email and billing country entered at checkout. Card numbers go to Stripe and never reach our servers.
• Ratings and invites. If you use “Rate us” in the gift center, we keep the stars you chose and any comment you wrote, together with your account and the page you were on. If you invite friends, we keep your invite code and a list of the new accounts that joined through it.
• Technical data. Each sign-in session is stored with the IP address and browser it came from. We also record the country you signed up from, as reported by Cloudflare, and when you were last active. IP addresses help us slow down repeated login attempts, and Cloudflare keeps short-term request logs that we use to fix errors.

What happens when you generate or edit an image

1. An automated moderation model running on Cloudflare screens your prompt. Only the text is checked. A prompt that fails is refused before any credits are taken.
2. If it passes, the prompt goes to fal.ai with links to your reference photos, if any. fal.ai runs the SI model you picked, made by Black Forest Labs, Google, ByteDance, OpenAI, Ideogram, Alibaba, xAI or Recraft, and the model provider applies its own safety filters.
3. The finished images are copied into our own storage on Cloudflare R2, so they remain in your Create library after the provider’s temporary links expire.
4. We keep a record of the request: prompt, model, settings, credit cost, timing and, when it fails, the error message. That record is how we refund failures and answer support questions.

If you press Enhance, the idea you typed and the name of the selected model are sent to a language model on Cloudflare, which drafts a longer prompt for you to review. The moderation check is automatic and can refuse a prompt with no human involved; a refused prompt costs nothing, and if you think it was wrong, email us for a human review.

How we use your information

• to run and secure your account;
• to produce, store and deliver the images you request;
• to take payments, add credits, refund failed generations and answer support requests;
• to stop fraud and misuse, keep the site running smoothly, and apply our Terms of Service;
• to learn which features people use.

Your personal data is never sold and never used for ads. We don’t train any models on your prompts or photos, and your images are not published or shown to other users.

Companies that process data for us

• Cloudflare runs our servers, database and file storage, sends sign-in emails, and hosts the moderation model and the Enhance helper.
• fal.ai, plus whichever model provider makes your image, receives your prompt and reference photos to produce the result and handles them under its own terms.
• Stripe processes card payments at checkout, connected through our own payment hub.
• Google confirms your identity when you choose Continue with Google.

Some of these companies handle data outside your country, including in the US, using their own safeguards for international transfers. Except as described in this privacy policy, or when the law requires it, we do not share your personal data with anyone.

Cookies and browser storage

The only cookie we set is sid, an essential login cookie. It lasts up to 60 days, is renewed while you keep using the site, and is deleted when you sign out. There are no advertising or tracking cookies. Google sets its own cookies inside the sign-in window, as does Stripe on its checkout page. When you open a friend’s invite link, your browser’s local storage remembers their code for up to 30 days, so the invite still counts if you register later. Your browser also remembers, until the end of the visit, that you hid the offer banner.

Analytics

For statistics we use Umami, an open-source analytics tool that we host ourselves. It counts visits to each page plus a handful of actions, such as starting an image, opening checkout or claiming a gift, and notes the referrer, browser, operating system, device type, language and an approximate location (country, region and city) derived from your IP address. Umami sets no cookies, does not keep your IP address in readable form and is never used for advertising.

How long we keep your data

• Account details: for as long as the account exists.
• Generated images: until you delete them. Deleting a generation in Create removes every image file in it from our storage; the record of the request (prompt, settings and credit cost) stays with your account for billing.
• Uploaded reference photos: deleted automatically after 30 days. “Edit this image” saves a copy of the generated image as a new upload, and that copy is deleted after 30 days as well; the original stays until you delete it.
• Sessions: up to 60 days, then removed. A sign-in link stops working 20 minutes after we send it, and our record of it is erased a day later.
• Order records and credit history: for the period tax and bookkeeping rules demand, even after you delete your account.

The limits described in this privacy policy are enforced by an hourly cleanup job that removes expired sessions, old login links and reference photos older than 30 days.

Deleting your account

To close your account, email support@siimagegen.com from the email address you registered with. Within 30 days we delete your generated images and uploads from storage, end every session, erase the prompts and settings saved with your generations, replace your email address with an anonymous placeholder, and remove your name, photo, Google ID and country. Order records, including the payment details Stripe reported, and your credit history are kept because tax and bookkeeping rules require them. Ratings and comments you sent remain, no longer linked to your email address.

Security

Every connection uses HTTPS. Session tokens and sign-in links are stored only as one-way hashes, so a copy of our database could not be used to take over your account. Only a few admins can reach the back office, using long random keys. Your files sit at long, random web addresses that we never list or publish, but anyone who has the exact address of a file can open it, so share image links with care.

Emails

We email you only the sign-in links you ask for, replies to your messages and, rarely, important notices about the service or our policies. Stripe may email a receipt for a purchase. We send no marketing email.

Your privacy rights

Wherever you live, you may request a copy of your personal data, have it corrected, or have your account erased. Residents of the European Economic Area, the UK, California and other places with privacy laws may have further rights: to object to or restrict processing, to receive data in a portable format, and to lodge a complaint with a data protection authority. Under California law we neither sell nor share personal information, and exercising a right never affects the service you get. To use any of the rights described in this privacy policy, write to support@siimagegen.com from the email you registered with.

For users in the EEA and UK, our legal bases are: our contract with you, for your account, generations and purchases; legitimate interests, for security, abuse prevention and usage statistics; legal obligations, for tax and accounting records; and consent, where the law requires it.

Children

You must be 18 or older to use SiImageGen, and we never knowingly hold data about anyone younger. If you think a minor has an account, let us know and we will remove it.

Changes to this privacy policy

When the way we handle data changes, we revise this privacy policy and update the date above. Bigger changes are also announced on the site or by email to account holders. Questions about this privacy policy: support@siimagegen.com.