Privacy Policy

We use information to provide and operate the Service; authenticate users; store and edit images; generate AI results; provide semantic search; process payments and Credits; save preferences and edit history; prevent fraud and abuse; enforce usage limits; secure, maintain, and troubleshoot the Service; analyze performance and product usage; communicate with you; comply with law; and protect our users, rights, and property.

We may use aggregated or de-identified information that cannot reasonably identify you for analytics, product development, and other lawful purposes.

When you use AI-powered features, relevant photos, prompts, and instructions may be sent to AI service providers such as Anthropic and Replicate to produce the requested result. Other providers may process images for storage, delivery, conversion, optimization, or background jobs.

We do not use Your Content to train a general-purpose AI model operated by Redux unless you separately choose to participate in such a program. Third-party providers process information under their agreements with us and their applicable terms. Do not upload content that you do not have permission to process or information that you do not want processed as described in this Policy.

Redux does not use uploaded photographs for facial recognition or biometric identification. AI features may still detect or modify visual features, including faces, when necessary to perform an edit requested by you.

We may share information with service providers that help us operate the Service, including providers for authentication, hosting, databases, storage, content delivery, image processing, AI generation, payments, analytics, security, error monitoring, communications, and background processing. These providers may include Clerk, Vercel, Neon, Cloudinary, Stripe, Anthropic, Replicate, Inngest, PostHog, Sentry, and similar providers that replace or supplement them.

We may also share information when you direct us to do so; when necessary to comply with law, legal process, or valid government requests; to investigate fraud, abuse, security incidents, or violations of our Terms; to protect rights, safety, and property; or as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use Your Content to serve targeted advertisements. If these practices change, we will update this Policy and provide any legally required choices before the change applies.

We and our providers may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, prevent abuse, measure performance, and understand how the Service is used. Analytics and monitoring providers may include PostHog, Sentry, and Vercel Analytics.

You can control cookies through your browser settings. Blocking essential storage may prevent account login or other Service features from working. Where required by law, we will request consent before using non-essential cookies or similar technologies.

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, complete transactions, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Retention periods depend on the type of information and why it was collected.

Your Content is generally retained while it remains in your account or is needed to provide a requested feature. When you delete content or close your account, we will delete or de-identify associated information within a reasonable period, except where it must be retained for backups, security, fraud prevention, payment records, legal compliance, or disputes. Backup copies may remain until they are overwritten through our normal backup cycle.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include access controls, encryption in transit, rate limiting, monitoring, and restricted administrative access. No online service or storage system is completely secure, so we cannot guarantee absolute security. Keep independent copies of important original photos and exports.

You may update certain account information through your settings, cancel subscriptions through your billing settings or the Stripe Customer Portal, and delete supported content through the Service. You may also request access to, correction of, deletion of, or a copy of your personal information by emailing admin@redux.so.

Depending on where you live, you may also have rights to object to or restrict certain processing, withdraw consent, appeal a denied request, or complain to a privacy regulator. We will not discriminate against you for exercising a privacy right. We may verify your identity before completing a request and may deny or limit requests where permitted by law.

Residents of certain U.S. states may have rights to know what personal information we collect and use, request access, correction, or deletion, obtain a portable copy, and opt out of certain sales, targeted advertising, or profiling. Redux does not currently sell personal information or use it for cross-context behavioral advertising.

You or an authorized agent may submit a request at admin@redux.so. We may request information needed to verify the request and the agent's authority. If we deny a request, you may appeal by replying to our decision. These rights apply only where required by applicable law and may be subject to exceptions.

Redux is operated from the United States. If you use the Service from another country, your information may be transferred to and processed in the United States and other countries where our providers operate. Those countries may have different data-protection laws from your country.

Where applicable, we process personal information because it is necessary to provide the Service or perform our contract with you, because we have legitimate interests in operating and securing the Service, because we must comply with legal obligations, or because you have given consent. Where required, we use legally recognized safeguards for international transfers.

Users in the European Economic Area, United Kingdom, Switzerland, and other applicable regions may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent where processing is based on consent. You may also complain to your local data-protection authority.

The Service is intended only for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact admin@redux.so so we can investigate and delete it where appropriate.

The Service may contain links to or integrations with third-party services. Their privacy practices are governed by their own policies, not this Policy. Review their policies before providing information directly to them.

We may update this Policy as the Service, providers, or legal requirements change. We will update the date above and provide additional notice through the Service or by email when a change is material. Your continued use of the Service after the effective date is subject to the updated Policy, but we will request consent where required by law.

For privacy questions, requests, or complaints, contact:

© 2026 Levi Purkey, doing business as Redux. All rights reserved.