Privacy Policy
Last updated: May 2026
This Privacy Policy explains how plipto.com collects, uses, and protects personal information.
Information We Collect
We collect account information from Google OAuth, usage data, payment records from our payment provider, uploaded photos for processing, transformation results, and operational logs.
We may collect and retain operational logs, IP addresses, device or browser signals, and abuse-prevention data for security, fraud prevention, rate limiting, debugging, and legal compliance.
How We Use Information
We use information to provide transformations, manage credits and payments, prevent abuse, improve reliability, respond to support requests, and comply with legal obligations.
Uploaded Photos
Original uploaded photos are automatically deleted after successful processing or within 24 hours if processing fails. R2 lifecycle rules may be used as a fallback cleanup safeguard.
Transformation results may remain available in your account until removed by the Service or expired according to the Service retention policy.
Third-Party Services
plipto uses Cloudflare for hosting/storage/security, OpenAI and Google Gemini through Vertex AI for AI processing, Google OAuth for sign-in, and a third-party payment provider for payments.
We may use TikTok Pixel on public pages to measure advertising performance, understand visits from TikTok ads, and improve campaigns. TikTok may receive information such as page views, browser or device signals, interactions with public pages, and a registration-completed signal after a new account is created. We do not intentionally load TikTok Pixel on account, admin, payment, result, or transformation upload pages.
Cookies
We use essential cookies and HTTP-only session cookies required for authentication, security, fraud prevention, and operation of the Service. We may also use advertising or analytics cookies and similar technologies, including TikTok Pixel, on public pages to measure campaign performance.
Retention
Payment records may be retained for legal and tax requirements. Account and usage data may be retained while your account is active. You may request account deletion by email.
When an account is deleted, we may retain irreversible hashes of deleted sign-in identifiers to prevent abuse, duplicate promotional credit claims, fraud, and policy violations.
Your Rights
You may request access, correction, deletion, or export of your personal data by contacting contact@plipto.com.
Contact
Privacy requests: contact@plipto.com