Privacy Policy
This policy covers saybrush.com and the Saybrush editor. In short: we use your photos to make the edits you ask for, we delete free photos after 14 days, and we don’t sell your data.
What we collect
- Photos and prompts. The photos you upload, the prompts you write and the results we make. Uploads are re-encoded when they arrive, which removes embedded metadata such as camera details and GPS location.
- Account details. If you sign in with Google, we receive your name, email address and profile picture from Google. We don’t get your Google password.
- Usage and safety records. Your credit balance and history, the edits you started, and the results of our content checks (the category matched and a score, never the image).
- Technical data. Your IP address and browser user agent are stored with your sign-in session. To limit free sessions per network, we also keep a one-way hash of your IP address for 24 hours.
Cookies
We use one cookie to keep you signed in, including as a guest before you create an account. We don’t use advertising or tracking cookies. When you first upload, Cloudflare Turnstile runs in your browser to check that you’re a real visitor; Cloudflare’s own privacy policy covers what it collects for that check.
How long we keep things
- Free photos and results (guests and accounts that haven’t paid): deleted automatically 14 days after they were created. The editor shows how many days each one has left, so download anything you want to keep.
- Paid accounts: kept until you delete them or close your account.
- Blocked photos and results are never stored. Only the check record is kept.
- Closing your account: email support@saybrush.com from the address you sign in with, and we delete your photos and account data.
Who else processes your data
We use these providers to run Saybrush. Each gets only what it needs for its job:
- Cloudflare hosts the site, stores your photos in a private bucket, and runs Turnstile.
- kie.ai runs the AI model that edits your photo. It receives the photo and your prompt. kie.ai keeps those files and the result for 14 days and its task logs for 2 months, then deletes them. We can’t delete them sooner.
- OpenAI runs our main content check on your photos, prompts and results. When kie.ai is unavailable, OpenAI may also make the edit itself.
- Replicate runs our backup content check when OpenAI’s is unavailable.
- Google handles sign-in if you choose “Sign in with Google”.
We don’t sell your personal data or share it for advertising.
Your rights
You can ask to see, correct, export or delete your data by emailing support@saybrush.com. Depending on where you live, you may have more rights under local law, and you can complain to your data protection authority.
Children
Saybrush isn’t for children under 13, and we don’t knowingly collect their data. See also our Content Policy.
Changes
If we change this policy in a meaningful way, we’ll update the date above and note it on the site.
Questions? Email support@saybrush.com.