Privacy Policy

Last updated: April 9, 2026

1. Overview

RemoveBgFast ("the Service") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data We Collect

We collect the minimum data necessary to operate the Service:

2.1 Account Information

When you sign in with Google, we receive and store your:

  • Email address — for account identification and billing.
  • Display name — for personalization.
  • Profile picture URL — for UI display only.

We request only the minimum OAuth scopes: openid, email, and profile. We do NOT access your Google Drive, Contacts, Calendar, or any other sensitive data.

2.2 Transaction Records

We store billing records including PayPal transaction IDs, purchase amounts, credit allocations, and usage logs. These records are essential for accounting, dispute resolution, and fraud prevention.

2.3 Image Data (Data Minimization)

We do NOT store your images. Images uploaded for background removal are:

  • Streamed directly through our edge processing pipeline using Web Streams API.
  • Held in volatile memory only for the duration of processing (typically 2-5 seconds).
  • Never written to disk, database, or persistent storage.
  • Never used for AI model training, analytics, or any purpose beyond the immediate processing request.
  • Physically destroyed when the processing worker terminates or the stream closes.

3. Cookies & Tracking

3.1 Essential Cookies

We use a single HttpOnly, Secure, SameSite=Strict authentication cookie containing a JSON Web Token (JWT) to maintain your login session. This cookie is essential for the Service to function and cannot be opted out of while using the Service.

3.2 Analytics & Advertising Cookies

We may use Google Analytics and Google Ads tracking pixels to understand usage patterns and measure advertising effectiveness. These cookies are only activated with your explicit consent through our Cookie Consent banner, in compliance with Google Consent Mode v2. You may withdraw consent at any time.

4. Your Rights (GDPR)

Under the GDPR, you have the following rights:

4.1 Right to Access

You may request a copy of all personal data we hold about you. Your Dashboard displays your account information and complete transaction history at all times.

4.2 Right to Erasure (Right to be Forgotten)

You may delete your account at any time through the "Delete Account" button in your Dashboard. Upon deletion, ALL personal data is permanently erased from our database, including: account information, transaction records, usage logs, and subscription data. This action is irreversible.

4.3 Right to Data Portability

You may request an export of your personal data in a machine-readable format (JSON) by contacting support@removebgfast.online.

4.4 Right to Rectification

Since account information is sourced from your Google profile, you may update it through your Google account settings. Changes will be reflected upon your next sign-in.

5. Data Retention

  • Account data: Retained until you delete your account.
  • Transaction records: Retained for financial compliance and dispute resolution purposes.
  • Usage logs: Automatically purged after 90 days.
  • Image data: Zero retention. Destroyed immediately upon processing completion.

6. Data Security

Your data is secured by Cloudflare's global edge network with enterprise-grade encryption in transit (TLS 1.3) and at rest. Authentication tokens are signed with HMAC-SHA256 and transmitted via HttpOnly Secure cookies to prevent XSS attacks.

7. Third-Party Services

We use the following third-party services:

  • Google OAuth — for authentication.
  • PayPal — for payment processing. PayPal's privacy policy applies to payment data.
  • remove.bg — for AI image processing. Images are streamed through their API under their data processing terms.
  • Cloudflare — for hosting, CDN, and edge computing infrastructure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. The "Last updated" date at the top indicates the most recent revision.

9. Contact

For privacy inquiries, data requests, or complaints, please contact our support team at support@removebgfast.online.