Privacy Policy
Last updated: April 27, 2026
1. Who are we?
The data controller for personal data is:
Moondesk
Legal form: Sole proprietorship
Address: Remote / online business
Email: support@imageprompter.net
2. Introduction
This privacy policy describes how Moondesk (https://imageprompter.net) collects, uses, and protects your personal data in accordance with applicable laws, including the GDPR (if applicable).
ImagePrompter is an AI assistant from Moondesk that converts user images into clean prompts and supports image-to-image and video prompt generation. Processing runs through Cloudflare Workers AI, and uploads are handled transiently without persistent storage.
3. What data do we collect?
We collect different categories of personal data to provide you with our services:
Browser Extension Data
Data collected: Image URLs selected via right-click
Purpose: When using the ImagePrompter Chrome extension, selected image URLs are passed to our web app to generate AI prompts. No images are stored by the extension.
Legal Basis: Performance of a contract
Identification Data
Data collected: Name, Email address, Account credentials
Purpose: Account creation, authentication, and support
Legal Basis: Performance of a contract
Content You Provide
Data collected: Images you upload, Prompts and captions
Purpose: Generate prompts via Cloudflare Workers AI; content is processed transiently and not stored after completion
Legal Basis: Performance of a contract
Usage & Analytics Data
Data collected: Feature usage events, Session identifiers, Credits usage
Purpose: Product analytics and service improvement (Rybbit Analytics)
Legal Basis: Legitimate interest / consent where required
Logs & Device Data
Data collected: IP address, User agent, Error logs, Cookies
Purpose: Security, fraud prevention, and debugging
Legal Basis: Legitimate interest
Payment Data
Data collected: Payment method tokens, Billing details
Purpose: Process payments via Polar with Stripe as the processor
Legal Basis: Performance of a contract
Marketing Preferences
Data collected: Email marketing consent, Newsletter preferences
Purpose: Send marketing communications via Brevo when you opt in
Legal Basis: Consent
4. Why do we use your data?
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| User account management | Performance of a contract | For as long as the account is active; deleted on request |
| Service delivery via Cloudflare Workers AI | Performance of a contract | Uploads processed transiently and not stored after completion |
| Payments and invoicing (Polar/Stripe) | Performance of a contract | As required for billing and legal compliance |
| Product analytics (Rybbit) | Legitimate interest / consent | Aggregated or limited to operational needs |
| Email communications (Brevo) | Consent / legitimate interest for transactional notices | Until you unsubscribe or delete your account |
| Security and abuse prevention | Legitimate interest | Logs retained briefly for security and troubleshooting |
5. Who receives your data?
Internal recipients:
- Technical Team
- Support Team
External recipients (processors):
| Provider | Purpose: | Location |
|---|---|---|
| Vercel | Hosting | Global / USA (DPF/SCC) |
| Convex | Backend data and auth | Global / USA (SCC) |
| Cloudflare Workers AI | Model inference for prompts | Global (SCC) |
| Polar (uses Stripe for payment processing) | Payments and subscriptions | Global / USA (DPF/SCC) |
| Rybbit Analytics | Product analytics | Global |
| Brevo | Email marketing and newsletters | EU (SCC) |
6. International Transfers
Your data may be transferred to countries outside the EU/EEA. These transfers are governed by:
- Destination countries: United States, EU, Global Cloudflare edge locations
- Mechanism: Standard contractual clauses and provider data privacy frameworks where applicable
7. Data Security
Data in transit is encrypted. Uploaded images are processed transiently through Cloudflare Workers AI and are not retained after generation. Operational logs are limited to what is necessary for security and debugging.
8. What are your rights?
In accordance with applicable privacy laws, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent (for marketing/analytics)
Exercising your rights: By email at contact@imageprompter.net
Response time: Maximum 1 month
You also have the right to lodge a complaint with the Competent Data Protection Authorities.
9. Contact
For any questions regarding this privacy policy or to exercise your rights, please contact us: