Privacy Policy

Privacy policy for Z-Image AI
Dec 15, 2025

Introduction

Z-Image AI (“we”, “us”, “our”) provides a cloud-based creative platform that lets you generate, organize, and download AI images powered by models such as Z-Image and integrations like KIE. This Privacy Policy describes how we collect, use, store, and share personal information when you access zimage-ai.org, our web applications, or related services (collectively, the “Service”).

By using the Service, you agree to the practices described here. If you do not agree, please stop using the Service.

Scope

This policy applies to:

  • Visitors browsing our landing pages
  • Registered users operating the Playground, prompt library, or credit system
  • Customers purchasing credit packages or contacting support

It does not apply to third-party services that have their own privacy policies.

Information We Collect

1. Account & Profile Data

  • Email address, display name, locale preference, and authentication identifiers.
  • Optional profile details such as avatar or organization name.
  • Referral or invite information when you sign up through a shared link.

2. Service Usage & Generated Content

  • Prompts, negative prompts, aspect ratios, and metadata you input in the Playground.
  • Generated image URLs, gallery selections, download history, and credit consumption logs.
  • Feature toggles (e.g., selected language, theme) stored as part of your user settings.

3. Device & Technical Data

  • IP address, browser type, operating system, time zone, and device identifiers collected via server logs.
  • Session analytics, crash diagnostics, and performance metrics collected via cookies or similar technologies.

4. Payment & Billing Data

  • Billing name, address, VAT/Tax IDs, transaction IDs, and partial payment-card details processed through our payment provider (we do not store full card numbers).

5. Support & Communication

  • Messages sent to support@zimage-ai.org, chat transcripts, survey responses, and other communication records.

How We Use the Information

We process personal information to:

  1. Provide the Service – authenticate you, render the Playground, track credits, and deliver generated files.
  2. Operate Integrations – forward prompts to AI partners such as KIE, retrieve generation status, and store returned image URLs.
  3. Improve the Platform – analyze aggregated usage trends, test new features, and prevent abuse or spam.
  4. Process Payments – issue invoices, detect fraud, and manage subscription or credit balances.
  5. Support You – respond to inquiries, send transactional notifications, and deliver product updates.
  6. Comply with Legal Obligations – respond to lawful requests, enforce our Terms of Service, and safeguard our rights.

We rely on different legal bases depending on the jurisdiction, including contract performance, legitimate interests, and your consent (for example, when accepting cookies or receiving marketing emails).

Cookies & Tracking Technologies

We use first-party and third-party cookies, local storage, and similar technologies to:

  • Maintain your login session and remember preferences such as locale or selected theme.
  • Measure site performance, attribution, and conversion for marketing campaigns.
  • Protect the Service from abuse by using rate-limiting tokens or bot-detection mechanisms.

You can control cookies via your browser settings. Disabling essential cookies may limit functionality.

How We Share Information

We do not sell your personal information. We share it only with:

  • Infrastructure Providers (hosting, storage, monitoring) that power our Next.js stack.
  • AI & Model Partners (e.g., KIE) to fulfill prompt generation requests. We share only the necessary prompt parameters and receive task IDs or image URLs in return.
  • Payment Processors to handle credit card or wallet transactions securely.
  • Analytics & Communication Tools for product telemetry, error tracking, or customer support.
  • Professional Advisors & Authorities when required by law, to prevent fraud, or to protect our legal rights.

All vendors are bound by confidentiality and data-processing agreements where required.

Data Retention

  • Account and billing records are retained while your account is active and for the period required by applicable law (e.g., tax or financial regulations).
  • Generated images, prompts, and credits history remain in your workspace until you delete them or close the account.
  • Support tickets and logs are retained for operational needs and audit purposes, generally no longer than 24 months unless legally necessary.

If you request deletion, we remove or anonymize your personal data unless retention is mandated by law or needed for dispute resolution.

Security

We implement administrative, organizational, and technical safeguards such as encryption in transit, access control, least-privilege permissions, and regular security reviews. Despite these measures, no online service is 100% secure. Please keep your password confidential and notify us of any suspicious activity.

International Data Transfers

Our servers and providers may operate in multiple countries. When data is transferred internationally, we use standard contractual clauses or comparable safeguards to protect it according to applicable law.

Your Rights & Choices

Depending on your location, you may have the right to:

  • Access, correct, or delete personal data we hold about you.
  • Export your data in a portable format.
  • Object to or restrict certain processing.
  • Withdraw consent (for example, unsubscribe from marketing emails).

To exercise these rights, email support@zimage-ai.org. We may ask for verification before fulfilling your request.

Children’s Privacy

The Service is not intended for children under 13 (or the minimum age required by local law). We do not knowingly collect data from children. If you believe a child has provided personal data to us, contact us and we will remove the information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The “created_at” value in the front matter acts as the effective date. When we make material updates, we will post a notice on the site or notify you by email.

Contact Us

For privacy inquiries, requests, or complaints, contact:

If you reside in a jurisdiction with a data protection authority, you also have the right to lodge a complaint with your local authority.