Privacy Policy

This Privacy Policy explains what data EraseText collects when you use erasetext.com and the editor, why we collect it, and how long we keep it. The data controller is Morling, LLC, a Delaware LLC. Contact: [email protected]. The short version: we process your image to perform the edit you asked for, we delete uploads and results after one hour, we do not sell your data or run advertising on EraseText, and we use Google Analytics only for aggregated product measurement.

1. Images you upload

The pixels have to reach our servers for the erase to run: your image (and any selection mask you draw) is uploaded over an encrypted connection to private storage and passed to our processing backends to detect and remove the text. Access is scoped by short-lived signed URLs — there is no public gallery.

• Retention: uploads and generated results are automatically deleted after one hour.
• We do not sell your uploads, publish them, or use them in marketing without your explicit permission.
• We use your images to fulfil your request — not for unrelated purposes.

2. Account and billing data

You can use the editor without an account. If you sign in, we store your email address and, for Google sign-in, the basic profile information Google shares (email and name). We use this to operate your account and to send the one-time sign-in codes you request. We do not send marketing email unless you opt in — for example by subscribing to the newsletter.

If you buy credits or a subscription, our payment provider processes the card details; we store plan status, credit balance, ledger entries, API keys you create, and payment-provider customer identifiers needed to manage billing. We do not store full card numbers on our servers.

If you send product feedback (for example via Report a problem), we store the note you typed, optional contact email, and technical context such as the editor tab or error message — not your uploaded image unless you separately email us a file.

3. Technical data

Like most web services, our infrastructure records standard request logs — IP address, browser type, timestamps, and the endpoint called — used for security, abuse prevention, and debugging.

We use Google Analytics 4 (Google LLC) to understand aggregated product usage — for example which pages are visited and whether key actions such as upload or checkout were started. Google may set cookies or use similar identifiers and receive your IP address and device/browser information. We do not use this for advertising personalization on EraseText, and we do not sell analytics data. Google's processing is described in Google's privacy policy. You can limit analytics cookies through your browser settings or Google's opt-out tools.

4. Who processes data on our behalf

We run the Service on established cloud providers acting as our processors under contract: hosting and file storage, managed authentication, payment processing, product analytics (Google Analytics), GPU inference for the erase model, and a text-detection (OCR) service used when you select specific text. Some processing runs in the United States and other regions; where data crosses borders, we rely on the safeguards our providers offer, such as standard contractual clauses. If you sign in with Google, Google processes that sign-in under its own privacy policy.

5. Your rights and account deletion

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Uploaded images delete themselves within an hour.

• You can permanently delete your account in Account → Settings (or email us). That removes your profile, credits, API keys, and sign-in, and cancels open subscriptions.
• We aim to complete account-deletion requests promptly; email requests are handled within 30 days.
• We may retain limited payment and fraud-prevention records where the law requires (for example tax invoices held by our payment provider).
• To stop repeat claims of free promotional credits after deletion, we keep a one-way hash of the account email (not the address itself) so daily login, API trial, and referral grants are not reset by signing up again with the same email.
• You also have the right to complain to your local data-protection authority.

6. Security

Data is encrypted in transit, storage is private by default, and access to production systems is restricted. No online service can promise perfect security, which is one more reason we keep image retention short.

7. Children

The Service is not directed at children under 13 (or the higher age your local law sets), and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

8. Changes to this policy

We may update this policy as the Service evolves; the date at the top reflects the latest revision. Material changes will be announced on the site.

9. Contact

Privacy questions, export, or deletion requests: [email protected].