This Privacy Policy explains how Outpaint.co.uk ("Outpaint", "we", "us" or "our") collects, uses, shares and protects personal data when you use our website and image-outpainting service (the "Service"). We are the data controller for the personal data described below. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller: [YOUR FULL LEGAL NAME], a sole trader trading as "Outpaint.co.uk", of [YOUR ADDRESS FOR SERVICE]. ICO registration reference: [ICO REGISTRATION NUMBER, once registered]. (Placeholder — fill in before launch: UK GDPR and consumer law require an identifiable controller name and address on this page.)
For any privacy request or question, contact us at support@outpaint.co.uk.
1. The data we collect
- Images you upload, and the generated output. These may contain personal data (for example, if a photo shows people). Your upload is processed transiently and not kept; your generated result is stored for 30 days behind a private, unguessable link so you can retrieve it again — see section 5.
- Email address — when you use the free tier or make a payment (used for the free-use allowance, your payment receipt, and the purchase confirmation).
- IP address — used transiently for rate limiting and bot protection. It is hashed in memory for the rate-limit check and passed to Cloudflare for the bot check; we do not store your IP address (raw or hashed) in our own database.
- Anonymous identifier (cookie) — a random ID that tracks your usage allowance and keeps the Service secure. It does not identify you by name.
- Payment information — card payments are collected and processed directly by Stripe. We do not receive or store your full card number. We store an encrypted payment reference only if you tick "store details for future use".
- Transform records — for each transform: the requested dimensions, whether it was paid, and a perceptual hash of the output (a short numeric fingerprint derived from the image, used for abuse investigation; the image itself cannot be reconstructed from it).
- Content-safety (moderation) logs — every upload and every generated image is automatically safety-screened (see section 3). We log the decision, the safety-category scores returned by the screening model, your anonymous ID, and — for paid transforms — the payment reference and refund status. We never store the image content in these logs.
- Technical and usage data — basic logs such as request times and error events, used to operate and debug the Service.
2. How we use your data and our legal bases
- To provide the Service (processing your image, returning a result, sending your purchase confirmation) — performance of a contract.
- To take payment and issue refunds — performance of a contract.
- To keep the Service safe and lawful (content moderation of uploads and outputs, moderation logs, suspension of abusive sessions) — our legitimate interests and legal obligations.
- To prevent abuse and fraud (rate limits, bot checks) — our legitimate interests.
- To enforce usage allowances (free-tier limits) — our legitimate interests.
- To comply with the law and respond to lawful requests — legal obligation.
We do not sell your personal data, and we do not use your images to train AI models.
3. Automated content moderation and automated suspension
To keep the Service safe, every uploaded image and every generated image is automatically screened by a content-safety model (provided by OpenAI) before any result is delivered. If an image is flagged, the transform is blocked; if a paid transform is blocked, your payment is refunded automatically.
If a session triggers repeated moderation blocks in a short period, our systems automatically suspend that session pending review. This is an automated decision taken without human involvement at the moment it happens. If you are suspended, you have the right to ask for a human review, to make representations, and to contest the decision — email support@outpaint.co.uk and a person with authority to overturn the suspension will review it and respond.
4. Who we share data with (sub-processors)
To run the Service we use trusted third-party providers who process data on our behalf. Some are located outside the UK/EEA; where that is the case, transfers are protected by appropriate safeguards (such as UK International Data Transfer Agreements / Standard Contractual Clauses, the UK extension to the EU-US Data Privacy Framework, or an adequacy decision).
- Stripe — payment processing (receives your email and payment details).
- Replicate / Black Forest Labs (FLUX) — the AI model that performs the outpainting. Your image and a generated mask are sent for processing and returned.
- OpenAI — two uses: (a) a downscaled copy of your upload may be analysed to guide the outpainting (e.g. detecting whether people are present); (b) downscaled copies of your upload and of the generated output are safety-screened before delivery. OpenAI does not use API data to train its models.
- Supabase — our database (hosted in the EU, Ireland), storing the usage, payment, transform and moderation records described in section 1.
- Upstash — rate limiting. Receives only a hashed identifier derived from your IP address, never the raw address.
- Cloudflare (Turnstile) — the "are you human?" check, which processes your IP address and browser signals to distinguish people from bots.
- Vercel — application hosting, and Vercel Blob storage for your result image while it remains retrievable (see section 5).
- IONOS — domain provider.
Each provider operates under its own privacy terms and a data-processing agreement. We share only the minimum data needed for that provider to perform its function.
5. How long we keep your data
- Your uploaded image: processed transiently to generate your result and not retained afterwards. (Once sent to a processor such as Replicate or OpenAI, short-term retention there is governed by that provider's policies.)
- Your generated result: stored for 30 days so you can get it back if you lose the tab, your connection drops, or you simply didn't save it the first time — reopening the site on the same device and browser retrieves it automatically. It is also available via a private, unguessable link shown on screen; there is no page that lists or browses results, so having that link (or being on the same device) is the only way to access one. After 30 days it is permanently deleted.
- Payment records: up to 6 years from the transaction, as required by UK tax and accounting law.
- Moderation logs (metadata only, no images): up to 6 years from creation — matching the limitation period for legal claims — then deleted.
- Transform records and usage/allowance data: kept while your session identifier remains in use and for up to 2 years after your last activity, then deleted.
- Free-tier email hashes: kept for as long as the free-allowance scheme operates, because deleting them would let the same email claim the free allowance repeatedly. These are one-way hashes: we cannot recover your email address from them.
6. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict or object to processing;
- data portability;
- not be subject to certain automated decisions without safeguards — see section 3 for how to contest an automated suspension;
- withdraw consent where processing is based on consent.
You can request an export or deletion of your data by emailing support@outpaint.co.uk from, or quoting, the email address you used. We will respond within one month.
What deletion covers: deletion removes your usage records, transform records, saved billing details and payment rows from our systems, and clears the anonymous session cookie from your browser. Two things are retained, and we are required to tell you why: (a) the one-way hash of any email that has used the free allowance, kept so the free tier cannot simply be re-claimed (it contains no recoverable email); and (b) moderation log metadata, retained under the UK GDPR exemption for the establishment and defence of legal claims (Article 17(3)) and for the prevention of abuse. Neither contains your name, email, IP, or any image.
7. Cookies and local storage
We use a small number of strictly necessary cookies and identifiers to operate the Service: an anonymous session ID (to track your usage allowance and prevent abuse) and Cloudflare Turnstile's cookies (to tell people from bots). These are essential to providing the Service you request, so they do not require a consent banner. If you tick "remember email on this device", your email is saved in your own browser's local storage only — it is not sent to us until you use the Service, and unticking the box removes it. We do not use advertising or cross-site tracking cookies.
8. Children
The Service is not intended for, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest for sensitive fields (AES-256), one-way hashing of email addresses used for abuse prevention, strict security headers, rate limiting and bot protection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; if a breach occurs that risks your rights, we will notify the ICO and, where required, affected users, in line with UK GDPR.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows when it last changed. If we make material changes, we will highlight them on the site.
11. Contact & complaints
Questions or requests: support@outpaint.co.uk. If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.