Picmio · Photos & privacy
How your photos are used
Updated 11 November 2026. This draft awaits final confirmation of operator disclosure details and the overall policy. It has not been legally reviewed. Refund handling follows the Service & refunds page.
Operator & contact
Picmio provides photo restyling. For support, privacy or refund enquiries, contact: support@picmio.app
Support emails sent to support@picmio.app are forwarded by Cloudflare Email Routing to the Gmail inbox we use. Cloudflare and Google process the sender address, message and any attachments under their policies. Replies may show our Gmail address.
Before uploading
Only upload photos you have the right to use. Obtain a guardian’s consent for minors shown. Use non-sensitive photos when testing.
Where your photos go
Photos are resized in your browser. After processing, the server stores the result, watermarked preview, chosen style and unlock status. The original upload is not stored as a separate file.
OpenAI Sites hosts this website, with accounts, pictures and orders in managed Cloudflare D1 and private R2 storage. Private images are served only after ownership and download-permission checks.
You can try as a guest. A secure browser credential protects your pictures, which are moved to your studio account when you sign in. Clearing browser data or switching devices before signing in may lose access.
Guest access in this browser lasts up to 7 days. Sign in to keep your work, or delete it before access expires.
For a restricted-access website, the hosting platform may separately verify who can visit. This does not replace signing in to your studio account with email or Google.
When real generation is available and you submit a photo, our server sends the resized image and style instructions to OpenAI for that edit. API data is not used for training by default, but safety retention may apply. We do not promise zero provider retention.
Accounts & email preferences
Email sign-in stores a protected password verifier, not your readable password. Google sign-in uses Google’s authorization; we do not receive your Google password. Short-term request counts and transformed network identifiers help limit abusive attempts.
Google sign-in uses a stable Google account ID and verified email to create your Picmio account. It does not read your Google photos or mail. We do not receive your Google password.
Promotional email is off by default. Opting in records your email, choice and consent time; you can use and download without subscribing. Unsubscribe in Account & emails anytime. This version saves preferences only and sends no promotions. Email verification and unsubscribe links are required before campaigns begin.
Resend delivers verification and reset emails, receiving your email address, one-time link and message content. This does not subscribe you to promotions. Resend states that email data is stored in the US under its retention policy.
Verification and reset emails come from Picmio <account@mail.picmio.app>. That address has no inbox; use the support address above for enquiries.
HD downloads & payments
Sign in before downloading. Unlocking gives access to the HD file from the same edit. Only the commercial preview watermark is removed; AI-generation labeling remains for real generated content. Unlocking a demo does not charge you.
Payments use Stripe-hosted Checkout. Payment details go directly to Stripe; Picmio does not store full card numbers or payment passwords. We keep order IDs, transaction references, amounts, currencies and payment status, and verify payment before unlocking HD. Sign-in or registration does not charge you.
Storage & deletion
Open a picture in My pictures, choose Delete this picture and confirm to remove preview and HD. Completed deletion cannot be reversed through the site. Failed cleanup can be retried and does not restore free use. Wait for processing or pending payment checks to finish first.
Unclaimed guest pictures become eligible for cleanup after 7 days, once access has expired. Scheduled cleanup is currently paused, so retention may be longer. Site visits or operator actions still attempt cleanup, without a guaranteed completion time. Account and payment-linked pictures are excluded from guest cleanup; you can delete your account pictures.
After deletion we retain picture status, free-use and necessary order records for anti-abuse and support. Unclaimed guest pictures enter cleanup after 7 days once access expires; failed cleanup remains retryable. Pictures saved to an account remain until the user deletes them.
The agreed target retention for complete offline backups is 30 days from creation. The process for enforcing expiry is still pending, no automatic expiry is implemented, and deletion on day 30 is not currently guaranteed. Online deletion does not immediately rewrite old backups. This rule does not apply to online accounts, pictures or orders.
Data requests & international processing
Contact support to request access, correction, export or deletion of data, or account closure. We verify ownership before handling requests and explain any order or anti-abuse records that must remain. There is currently no automatic account-closure option.
These providers may process data outside your country or region under their own policies. We do not promise storage in a single region or zero retention by third parties.
Google · Cloudflare · Stripe · Resend