Last updated: September 27, 2026
Photoedit ("we", "us") is a raster image editor that runs in your browser. This policy says what Photoedit keeps on your device, what it stores on its servers, what it sends to whom, and how you take it back.
While using the App, we may require you to provide us with certain personally identifiable information, including but not limited to your name, email address, company name, mailing address, and phone number ("Personal Information"). The Personal Information that we collect depends on the context of your interactions with us and the App, the choices you make and the products and features you use.
We also collect User Data, which is non-identifiable data collected automatically, generated by the use of the App ("User Data").
You have no legal obligation to provide us with any information or data, however some or all of the Photoedit features or services may not be available should such information or data not be collected, processed or used.
We collect personal information that you voluntarily provide to us when expressing an interest in obtaining information about us or our products and services, when participating in activities on the App or otherwise contacting us.
Credentials: We collect passwords, password hints, and similar security information used for authentication and account access.
Payment Data: All payments are processed by the App Store or Google Play and we have no access to your payment account or card details.
We automatically collect certain information when you visit, use or navigate the App. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information.
We use Personal Information collected via our App for a variety of business purposes. We process your Personal Information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.
We use the Personal Information we collect or receive to facilitate account creation and logon process, facilitate your use of the App, send marketing and promotional communications, send administrative information, fulfill and manage your orders, manage user accounts, deliver services, respond to user inquiries, and for other business purposes such as data analysis and improving our App.
We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.
We may process or share data based on: Consent, Legitimate Interests, Performance of a Contract, Legal Obligations, and Vital Interests.
We may share your Personal Information with third party vendors, service providers, contractors or agents — including analytics providers and third-party artificial-intelligence providers that process content to deliver app features — who perform services for us. Any such third party is required to provide the same or equal protection of your data as stated in this policy. We may also share or transfer your information in connection with business transfers.
We will only keep your Personal Information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible.
We have implemented appropriate technical and organizational security measures designed to protect the security of any Personal Information we process. However, we cannot guarantee that the internet itself is 100% secure. Transmission of Personal Information to and from our App is at your own risk.
Your Personal Information and User Data may be stored and processed in any country where we have facilities. When we transfer Personal Information outside of the EEA, we always make sure to put in place appropriate and suitable safeguards.
The App may link you to third parties' content. This Privacy Policy does not address the privacy practices of any third parties. The inclusion of a link on the App does not imply our endorsement of the linked site.
We do not knowingly solicit data from or market to children under 13 years of age. By using the App, you represent that you are at least 13 or that you are the parent or guardian of such a minor.
In some jurisdictions, you may have certain rights under applicable data protection laws including the right to request access and obtain a copy of your Personal Information, to request rectification or erasure, to restrict processing, and if applicable, to data portability.
If you are resident in the European Economic Area and you believe we are unlawfully processing your Personal Information, you also have the right to complain to your local data protection supervisory authority.
You can withdraw consent and request deletion of your data at any time. Where the App provides in-app controls, you can clear your content or delete your account from the App's settings. You can also email us at inquiries@zaatar.tech to request access to, correction of, or deletion of your Personal Information, or to revoke a consent you previously gave.
We will action verified requests within the timeframe required by applicable law. Note that we may need to retain certain information where the law requires or permits it.
Yes. California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information we disclosed to third parties for direct marketing purposes.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated revised date and the updated version will be effective as soon as it is accessible.
If you have questions or comments about this policy, you may email us at inquiries@zaatar.tech.
Every edit happens on your device: the pixels of a picture you open, shoot or paint never leave it unless you send them somewhere yourself. Documents live in your browser's storage on the device you edit them on. Removing a background runs a model inside your browser; nothing is uploaded for it.
An image Vexel hands to Photoedit was uploaded to Vexel's storage by the account that sent it. Photoedit opens it under the same account. "Send to Vexel" uploads the edited image and the document you made from it to the same storage, where they stay until that account is deleted.
You can let an external assistant (Claude, Cursor and others) work in Photoedit on your behalf. The assistant gets a token bound to your account with the abilities listed on the approval page and edits the document open in your browser. Grants are stored on Photoedit's servers as hashes and you revoke them on the approval page; nothing an assistant does is sent anywhere but your browser.
Photoedit and Vexel share a sign-in. Signing in to one lets the other, in the same browser or on the same phone, offer the same account with one tap; signing out of one signs you out of both. Each app keeps its own record of you; the only thing they share is which account you signed in with.
Photoedit's API runs in Frankfurt, Germany, its database is a MongoDB Atlas cluster, images sent between the two apps sit in Cloudflare R2 and the web app is served by Cloudflare. To delete your account and everything it holds, email inquiries@zaatar.tech.