Privacy Policy

1. Who we are

Outstanding AI ("we", "us") operates H3 Image, an online AI image generator, at h3image.vip. We are the controller of the personal data described in this policy. You can reach us about privacy at contact@outstandingai.net.

2. Data we collect

• Account data: when you sign in with Google, we receive your name, email address, profile picture and a provider account ID.
• Content you provide: the prompts you write, the reference images you upload for Image Editing, your chosen settings, and the images generated for you.
• Billing data: credit pack, order number, amount, currency, country and payment status. Card or wallet details are collected and processed directly by our merchant of record (Waffo), not by us.
• Usage data: credits used, generation history and status, the models and settings you choose, and support messages you send us.
• Technical data: IP address, browser and device type, language, pages viewed, approximate location derived from IP, and essential cookies (see our Cookie Policy).

We do not intentionally collect sensitive personal data. We do not use your images to create biometric templates or to identify anyone; images are processed only to generate the result you request and to check uploads for safety. Please do not include sensitive personal information in prompts or uploads.

3. How we use your data and our legal bases

• To provide the Service: create and secure your account, generate and store your images, and deliver downloads (performance of a contract).
• To process orders, add purchased credits, return credits for failed generations, handle refunds, and prevent fraud and chargebacks (contract, legal obligation and legitimate interests).
• To keep the Service safe: screen prompts and uploads, enforce our Content Policy, and investigate abuse (legitimate interests and legal obligation).
• To answer support requests and send service messages, such as receipts or important policy changes (contract and legitimate interests).

We do not use your prompts, uploads or generated images to train AI models, and we do not use them in advertising. We do not sell or rent your personal data, and we do not share it for cross-context behavioural advertising.

4. Who we share data with

We share personal data only with service providers that help us run the Service, under contracts or terms that require them to protect it:

• Cloud hosting, database and file storage (Cloudflare).
• AI model providers that generate your images, such as MiniMax (MiniMax H3 Image) and Replicate (which runs GPT Image 2.6). They receive only the prompt, reference images and settings needed for that generation, and handle them under their own terms and privacy policies.
• Content-safety providers that screen prompts and uploads for prohibited content.
• Our merchant of record, Waffo (Waffo.com Limited), which processes your payment and handles tax, receipts, refunds and chargebacks. Waffo acts as an independent controller of the payment and transaction data it collects at checkout, under its own privacy policy (www.waffo.ai/privacy). We receive only the order details needed to add your credits, such as order number, amount, status and the email used at checkout. If another payment partner is shown at checkout, its own privacy policy applies.
• Sign-in provider (Google) to authenticate you.

We may also disclose data if required by law, to protect the rights and safety of users or the public, or in connection with a merger or sale of the business, in which case this policy will continue to apply to your data.

5. International transfers

Our providers may process data in the United States and other countries. Where data protection law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep data

• Uploaded images and generated images are kept while your account is active so you can access your history, and are deleted when you delete them or close your account, unless we must keep them longer to investigate abuse or comply with law.
• Account data is kept for as long as your account is active, and deleted within 30 days of an account deletion request.
• Billing and transaction records are kept for as long as required by tax and accounting laws (typically up to 7 years).
• Security and server logs are kept for a limited period, normally no longer than 12 months.

Model providers keep the inputs and outputs they receive for the periods set out in their own policies.

7. Security

We protect data with encryption in transit (HTTPS), access controls and least-privilege access for staff. No system is perfectly secure; if we become aware of a breach that affects you, we will notify you and the relevant authorities as required by law.

8. Your rights and choices

Depending on where you live (for example under the GDPR, UK GDPR or California privacy laws), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. California residents may also request to know what personal information we collect and to opt out of its sale or sharing; we do not sell or share personal information.

To exercise any of these rights, email contact@outstandingai.net from the address linked to your account. We will respond within 30 days and will not discriminate against you for exercising your rights. You can also lodge a complaint with your local data protection authority.

You can review your cookie information at any time from the "Cookie settings" link in the site footer.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal data from children, and our Content Policy forbids uploading images of minors. If you believe a child has given us personal data, contact contact@outstandingai.net and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. For material changes we will give you notice by email or on the site.

11. Contact

For privacy questions or requests, email contact@outstandingai.net.