Privacy Policy

1. Who controls your data

AI Coloring is the controller of personal data handled through this website, except where a provider independently determines how it processes data. You can contact us at support@aicoloring.online.

If you are in the European Economic Area, United Kingdom, or another region with similar laws, this notice describes the legal bases and rights that may apply to you.

2. Information we collect

• Account data: your email address, account identifier, credit balance, and account status.
• Creative content: text prompts, generation settings, Story Worlds, and coloring pages saved to your private library.
• Photo inputs: an image you choose to upload for a temporary photo-to-coloring transformation.
• Purchase records: product, amount, currency, order status, and payment-provider identifiers. We do not receive or store your full card number.
• Security and technical data: hashed login and CSRF tokens, hashed network/browser signals, request timestamps, device and session records, and diagnostic logs.
• Analytics data: when enabled, Google Analytics may receive page views, approximate location, device/browser details, referrer, and a pseudonymous analytics identifier. We do not send prompts, photos, generated pages, payment identifiers, or your account email as analytics events.

3. How and why we use information

• To create and maintain your account, send one-time login codes, deliver the features you request, and keep your library available. These uses are necessary to perform our agreement with you.
• To process one-time credit purchases, maintain an accurate credit ledger, provide receipts, and handle refunds or disputes. These uses are necessary for our agreement and legal accounting duties.
• To prevent fraud, secure accounts, enforce rate limits, troubleshoot failures, and defend legal claims. These uses support our legitimate interests in operating a safe service and, where relevant, legal obligations.
• To measure visits and improve the website with Google Analytics when analytics is enabled. Depending on the current configuration and your region, analytics may run immediately or after consent; you may opt out or withdraw consent without losing access to the service.

We do not sell your personal data or use your creative content for targeted advertising.

4. Uploaded photos and AI generation

When you use photo-to-coloring, your selected image is validated, temporarily stored, and sent with your instructions to Replicate so that the selected AI model can perform the transformation. The original upload is removed from AI Coloring's temporary upload storage after the request. The resulting page is copied into your private library and remains there until you delete it or your account.

Text prompts and generation settings are also sent to Replicate when necessary to create a result. Do not submit sensitive personal information or an image you do not have the right to use.

5. Cookies, local storage, and analytics

Essential storage

Authentication, session, CSRF, and trusted-device cookies protect sign-in and core functionality. They are required to provide the service and cannot be disabled through our analytics controls. Studio preferences and your analytics choice may be stored locally in your browser.

Google Analytics and Ads measurement

Google Analytics measurement ID G-67TE6VXR9X and Google Ads conversion ID AW-16754656869 may be disabled, placed behind a consent banner, or loaded immediately based on the site's active configuration. Advertising storage, advertising user data, and advertising personalization remain denied. Google may set analytics cookies such as _ga when measurement is enabled.

When measurement is enabled, Google Analytics may also receive conversion summaries for campaign performance — for example that a new account was created or that a credit pack was purchased, including the pack name, amount, currency, and an internal order identifier used to avoid duplicate purchase counts. We do not send payment-provider or card identifiers, prompts, photos, generated pages, or your account email as analytics events.

Use Cookie settings at any time to reject analytics or change your choice; this updates consent and removes accessible Google Analytics cookies. Your selection is remembered for up to 180 days, after which we may ask again.

6. Service providers and transfers

We share only the data needed for each provider to perform its role:

• Replicate processes prompts, settings, and temporary photo inputs for AI generation.
• Resend processes your email address and message delivery information to send login codes and transactional email.
• Dodo Payments processes checkout, payment, tax, receipt, refund, and fraud information. Its checkout collects payment credentials directly.
• Google Analytics and Google Ads process website measurement data when measurement is enabled.
• Hosting and infrastructure providers store application data, generated media, logs, and backups needed to operate the website.

Some providers may process information outside your country. Where required, we rely on recognized transfer mechanisms, provider data-protection terms, or other lawful safeguards. Provider processing is also governed by the provider's privacy terms.

7. Retention and deletion

Login codes expire after 10 minutes. Sessions expire or can be revoked from Settings. Original photo uploads are temporary. Generated pages remain until you delete them. Security and diagnostic logs are kept only as long as reasonably needed to investigate abuse and reliability issues. Purchase and credit-ledger records may be retained for accounting, tax, fraud prevention, disputes, and other legal requirements.

When data is no longer needed, we delete or anonymize it unless continued retention is required by law. Backup copies may remain for a limited period before routine deletion.

8. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of personal data. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also complain to your local data-protection authority.

To make a request, email support@aicoloring.online from your account email. We may ask for proportionate verification before acting. Some information may be retained where required for legal obligations or the establishment, exercise, or defense of claims.

9. Children

The account service is intended for adults. A child may use the creative features only under the direction of a parent or legal guardian. Do not upload a child's photo unless you have the legal authority and informed permission required to do so. Contact us if you believe a child's personal data was submitted improperly.

10. Security

We use encrypted transport in production, hashed one-time codes and login tokens, server-side authorization, origin and CSRF checks, rate limiting, private media delivery, strict upload validation, prepared database statements, and idempotent payment fulfillment. No internet service can guarantee absolute security.

11. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. The updated date above will show the latest revision. If a change materially affects your rights, we will provide a more prominent notice where appropriate.

12. Contact

Privacy, account, and general support requests can be sent to support@aicoloring.online.