Privacy Policy
Explore our Privacy Policy for a clear understanding of how we manage your data. We prioritize transparency to ensure your privacy and security while providing our services.
Last revision: September 8, 2026
1. The purpose of this privacy policy
IMGFILETOOLS is committed to respecting users' privacy and ensuring security when using our services. Your privacy and the security of your personal data are our priority. Please refer to this privacy policy to understand how we process your personal data.
This document can be printed for reference using the print command in the configuration options of any browser.
2. Who is the data controller for the processing of your personal data?
"Personal data" is any information relating to an identified or identifiable individual, such as your first and last name, email address, or signature.
IMGFILETOOLS (operator of imgfiletools.com) ("IMGFILETOOLS" or "we"), operating at https://imgfiletools.com, is the data controller of your personal data in accordance with the information provided in this privacy policy. Registered address: Update with your registered business address.
Please note that when using our services (for example, image tools, converters, AI tools, or document generators), you may provide us with files containing personal data for which you act as a data controller. In those cases, IMGFILETOOLS will act as a data processor. We will process such personal data only to the extent necessary to provide the service, and the Data Processing Agreement (Appendix I) applies. Where international transfers require it, the Standard Contractual Clauses (Appendix II — Module 4) may also apply.
If you provide us with personal data of other people or upload files that contain personal data of third parties, please ensure that you are authorized to do so and that the third parties have been informed as required by applicable law.
Questions about this privacy policy: [email protected].
3. What personal data do we process?
We process personal data that you provide directly to us (for example, when you fill out the registration or contact form), as well as other data derived from the use of our services (for example, account, billing, and technical logs needed to run the platform).
In relation to the content of your files, we will not access, analyze, review, index, or carry out any other action on their content except as necessary to provide the IMGFILETOOLS services as indicated in the Terms & Conditions.
IMGFILETOOLS does not use your content to train, improve, or develop its AI models or any third-party AI models.
4. For which purposes and under which legal basis we process your personal data?
Regardless of the service(s) you use, we may process your personal data for the following purposes:
- Service delivery and account management. To manage registration, provide requested tools, process payments (where applicable), send necessary service communications, and provide technical assistance. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- Support and rights requests. To deal with queries, incidents, and exercise of rights. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
- Legal compliance. Where processing is necessary to comply with legal obligations (for example, responding to lawful authority requests). Legal basis: legal obligation (GDPR Art. 6(1)(c)).
- Newsletters and commercial communications. Only where you subscribe. Legal basis: consent. You may use our services without receiving marketing emails.
- Promotions. To manage participation in draws, contests, or similar promotions. Legal basis: consent given when participating.
- Satisfaction surveys. To collect feedback and improve the service. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
- Cookies and similar technologies. As described in our Cookie Policy. Legal basis: consent (except strictly necessary cookies).
5. Do we disclose your personal data to third parties? Do we carry out international transfers of personal data?
We may disclose personal data in the following cases:
- When communication is necessary to comply with a legal obligation (GDPR Art. 6(1)(c)).
- In the event of a sale or structural modification of all or part of the business, to the extent necessary to complete the operation (GDPR Art. 6(1)(f)).
- When we use service providers acting as processors on our behalf (for example hosting, storage, email, or payment providers), contractually bound to our instructions and only processing data as needed to provide their services.
As a general rule, we aim to process personal data with appropriate safeguards. Where international transfers occur, we prioritize countries covered by an adequacy decision (GDPR Art. 45) or use appropriate transfer mechanisms such as Standard Contractual Clauses (GDPR Art. 46), including Appendix II (Module 4) where applicable. For more information, contact [email protected].
6. How long do we keep your personal data?
We only store your personal data to the extent that retention and processing are necessary to fulfil the purposes for which it was collected (for example, while you continue to use our services) and thereafter as required for legal obligations. After those periods, personal data is deleted or anonymized, subject to any legally required blocking period.
Uploaded files and processed outputs (your Content) are deleted from our servers within 2 (two) hours after processing, unless a specific product feature or legal requirement requires a different retention period.
7. What rights do I have in relation to my personal data?
Subject to applicable law (including the GDPR where it applies), you may request access, rectification, objection, erasure, restriction of processing, and portability. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email [email protected]. You may lodge a complaint with your local data protection supervisory authority where applicable.
8. Do we process personal data of minors?
IMGFILETOOLS is committed to the protection of minors. Our services are not specifically directed at children. Where minors use the services (including in educational settings), use should occur under the supervision of, and where required by law with the authorization of, parents, legal guardians, or the relevant educational institution.
If you are a minor and have used our services without required supervision or authorization, or if you become aware that a minor has done so, please contact us so we can take appropriate measures.
9. Privacy contact
For any matter related to the processing of personal data and the exercise of rights, contact:
- Email: [email protected]
- Postal / registered address: Update with your registered business address
10. Modification of the privacy policy
We will review and update this privacy policy when there are relevant changes in the law or in our processing activities. If we make a material change, we will inform you by appropriate means.