Privacy Policy

Last Updated: August 30, 2025
Effective Date: August 30, 2025

1. Information We Collect

1.1 Images you upload

We process your uploaded image to remove the background and store the input and result files on AWS S3 so you can download them. Files are kept for up to 30 days and then deleted automatically. We do not use your images for AI training, marketing, or sharing with third parties.

Files are encrypted in transit using TLS and encrypted at rest on AWS S3. If you want a file deleted sooner than 30 days, use the delete option provided after processing to remove it immediately from storage.

1.2 Analytics and cookies

We use Google Analytics (GA4) to understand basic website usage such as page views and device types. Google Analytics sets cookies and may collect information like cookie identifiers, device information, and IP related data. Under GDPR this can be personal data. We use these insights only to improve reliability and usability, not for advertising.

GA4 configuration: Ads Features are disabled, Google Signals is disabled, and data sharing with Google is disabled. GA4 does not store IP addresses. In the EEA, the UK, and Switzerland we set analytics cookies only after you give consent.

You can control analytics cookies using your browser settings, content blockers, the Google Analytics opt out add on, or by updating your preferences in Cookie Settings. For details, see our Cookie and Local Storage Policy and Google's privacy documentation.

1.3 No accounts or direct identifiers

We do not ask you to sign up and we do not collect names, email addresses, or similar direct identifiers to provide the core service.

2. How and Why We Use Data

2.1 Service delivery

We process your images to remove backgrounds and provide downloadable results for up to 30 days. Legal basis under GDPR: performance of a contract or steps at your request, and our legitimate interests in operating a reliable service.

2.2 Security and abuse prevention

We may use limited technical data to keep the service secure, prevent misuse, and diagnose issues. Legal basis: our legitimate interests in maintaining security and availability.

2.3 Analytics

We use Google Analytics to understand site usage and improve performance. In the EEA, the UK, and Switzerland we rely on your consent. In other regions we may rely on legitimate interests where permitted by law. You can withdraw consent at any time in Cookie Settings.

3. Storage and Retention

• • Images and results: stored on AWS S3 for up to 30 days, then deleted automatically. You can delete files immediately after processing via the delete option.
• • Download links: pre signed URLs expire automatically after a short time.
• • Security logs: minimal server logs such as IP address and timestamp are retained for up to 90 days for security and abuse prevention, then deleted.
• • Analytics data: retained by Google according to its policies and your settings.

4. Sharing and Service Providers

We do not sell or monetize your personal data. We share data only with service providers that help us run the site:

• • AWS S3: storage of uploaded and processed files with encryption at rest.
• • Google Analytics: basic usage metrics using cookies and IP related data.

These providers process data on our instructions and under contractual safeguards. We may disclose information if required by law.

5. Your Privacy Rights

5.1 GDPR rights for EU users

You have the right to access, erase, restrict, object, and request portability of your personal data. Where processing relies on consent, you can withdraw it at any time.

• • Access: request a copy of your personal data.
• • Erasure: files are deleted automatically after 30 days and you can request earlier deletion at any time.
• • Restrict or object: limit or object to certain processing.
• • Portability: receive data you provided in a portable format where applicable.
• • Withdraw consent: where we rely on consent for analytics, you can withdraw it.

You also have the right to lodge a complaint with your local supervisory authority.

5.2 CCPA rights for California users

• • Know: request details about personal information we collect and use.
• • Delete: request deletion of personal information, subject to legal exceptions.
• • Correct: request correction of inaccurate information.
• • Opt out of sale or sharing: we do not sell or share personal information as defined by the CPRA, and Google Ads features are disabled.
• • Non discrimination: we will not discriminate for exercising your rights.

6. Security

• • Encryption in transit using TLS when data moves between your device and our systems.
• • Encryption at rest for files stored on AWS S3.
• • Access controls and logging limited to what is needed to operate the service.

No security measure is perfect, but we work to protect your files and data with industry standard practices.

7. Cookies and Tracking

We use GA4 strictly for measurement. In the EEA, the UK, and Switzerland analytics cookies are set only after consent. GA4 Ads Features are disabled, Google Signals is disabled, data sharing with Google is disabled, and GA4 does not store IP addresses. You can change or withdraw consent in Cookie Settings, or use browser controls and Google’s opt out tools. See our Cookie and Local Storage Policy for details.

8. International Data Transfers

Our providers may process data in the EEA, the United States, and other countries where they operate. For transfers outside the EEA we rely on the EU-US Data Privacy Framework where applicable and on Standard Contractual Clauses, together with additional safeguards and provider security certifications.

9. Children

The service is intended for users who are 16 and older. We do not knowingly process personal data of children under 16. If you believe a child has used the service, please contact us and we will address it.

10. Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated through our website with reasonable advance notice.

We encourage you to review this policy periodically to stay informed about how we protect your privacy. Continued use of our service after changes become effective constitutes acceptance of the updated policy.

11. Contact

Questions or requests, including deletion requests, can be sent via our Contact page or to privacy@free-background-remover.com. For file deletion, please include the image link or identifier so we can locate it.