Privacy Policy
Last updated September 30, 2026
ImgFact (imgfact.com) is operated by KPZG LLC, doing business as ImgFact (“ImgFact”, “we”). This policy explains what we collect when you use ImgFact, why, who processes it on our behalf, and how long it is kept. Questions: hello@imgfact.com.
What we collect
Your account
- Your email address, and your name and profile picture if you sign in with Google.
- Your plan, scan allowance and how many scans you have used.
- If you pay, a Stripe customer and subscription reference. Your card details go to Stripe and never reach us.
Images you upload
- The image file, the file name, and any claim description you type in.
- What the analysis produces: the verdict and its reasons, the file's fingerprints (SHA-256 and perceptual hashes), and readings from its metadata, such as camera make and model, the date taken, editing software, and whether location data is present. We record whether a photo contains GPS data, not the location itself.
- For Compare Mode, the comparison result and a difference map of the two images.
Technical data
- Your account ID is used to limit how many requests you can make, and our hosting providers keep standard request logs, which include IP addresses.
We do not use advertising or third-party analytics trackers, and we do not sell your data.
Why we use it
- To analyse your images and show, store and export your results (the service you asked for).
- To run your account, apply your plan's limits and take payment.
- To keep the service secure and prevent abuse.
- To answer you when you contact us.
Your images are not used to train AI models, by us or by the providers below.
How long we keep it
| Data | Kept for |
|---|---|
| The image you upload | Deleted as soon as its analysis finishes, or fails. |
| A small preview of the image (up to 480 pixels) | 30 days, so your report shows which image it covers; then deleted automatically. |
| Compare Mode difference maps | 30 days; then deleted automatically. |
| Results, reports and comparison records | While your account is open, or until you ask us to delete them. |
| Account and billing records | While your account is open; billing records as long as tax law requires. |
Share links
If you create a share link for a report, anyone with the link can view that report and its preview image. A link cannot yet be switched off from your dashboard; email us and we will disable it.
Who processes your data
We use these providers to run ImgFact. Each processes data only to provide its part of the service.
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Database, sign-in and file storage (United States) | Account data, images, previews, results |
| Vercel | Website hosting | Requests, including uploads in transit |
| Railway | Hosting for our image analysis engine | The image, during analysis |
| Anthropic | Claude, for the visual review, report narratives and the forensic chat | The image, its analysis results, and your chat messages |
| Stripe | Payments | Billing and payment details |
| Upstash | Rate limiting | Your account ID |
| Sign-in, if you choose it | Your Google sign-in |
Anthropic processes images under its commercial terms, which do not allow it to train its models on our data. These providers are based in the United States, and your data may be processed there.
How we protect it
- Data travels over HTTPS.
- Images and previews are kept in private storage and shown only through short-lived links made for you.
- Database access is restricted so that each account can read only its own scans.
No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.
Your choices and rights
You can ask us to show you, correct, export or delete your data, or to close your account, by emailing hello@imgfact.com. We will respond within 30 days. Depending on where you live (for example the EU, the UK or California), you may have further rights, including to object to processing or to complain to your data protection authority.
Children
ImgFact is a professional tool and is not intended for anyone under 16.
Changes
If we change how we handle your data, we will update this page and its date. For a significant change we will also tell account holders by email before it takes effect.