Privacy Policy

Operator and contact

MossImage at mossimage.app is operated by SpringWang. Our contact address is support@mossimage.app, and messages sent there are forwarded to our support inbox.

Information we process

• Account: your name, email address, password (stored only as a secure hash), email verification status and sign-in sessions. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Images and instructions: images you upload, the boxes, arrows and notes you draw on them, your prompts, and the images we generate for you.
• Credits and payments: order references, credit activity, subscription status and refund records. Stripe and PayPal collect your payment details on their own checkout pages. We never receive or store your full card number.
• Service records: request logs with your IP address and browser details, error diagnostics, and records of safety checks.
• Analytics, only if you allow it: pages you visit on mossimage.app, the site or campaign that brought you here, your device type, and product steps such as starting a generation or checkout. See "Analytics" below.

Why we use it

We use this information to:

• sign you in and keep your account secure;
• create and edit the images you ask for;
• check prompts, uploads and results for prohibited content;
• verify payments and manage your credits and subscriptions;
• prevent abuse and fraud;
• fix problems and answer support requests;
• if you allow analytics, understand which pages and channels bring visitors and where the product can be improved.

We do not sell your information, and we do not use your images to train AI models. We do not publish your uploads or results anywhere. Our public example pages never use images from user accounts.

Service providers

We share information with these providers only as needed to run MossImage:

• Vercel: website hosting.
• Neon: database.
• Cloudflare R2: private image storage.
• Resend: account emails, such as verification and password reset.
• Stripe and PayPal: payments.
• APIMart: our provider for GPT Image, Nano Banana, Seedream and Grok Imagine. It passes your prompt, notes and reference images to the maker of the model you choose: OpenAI (GPT Image), Google (Nano Banana), ByteDance (Seedream) or xAI (Grok Imagine). Every version shows which model made it.
• fal: our provider for MOSS-Image. It runs the open MOSS-Image model and receives your prompt. MossImage never sends your uploaded images to MOSS-Image.
• SeeAPI and NVIDIA: automated safety review of prompts, notes, uploads and results.
• Google: if you choose to sign in with Google, and Google Analytics if you allow analytics.
• Microsoft Clarity: only if you allow analytics (see below).

These providers may process data in the United States or other countries, under their own terms and privacy policies. Model and safety providers may keep request data for a limited time for their own abuse monitoring.

The MOSS-Image demo

The MOSS-Image demo on our home page is embedded from Hugging Face and run by OpenMOSS. Anything you type into the demo goes to Hugging Face and OpenMOSS, not to MossImage, under their privacy policies. Loading the demo also lets Hugging Face see your browser and device details.

How images are stored and kept

• Uploaded images and annotation previews are deleted after 30 days.
• Generated results stay in your account until you ask us to delete them or your account is closed.
• For safety review, a reduced copy of an image is shared with the reviewers through a private link that expires after 10 minutes. The copy is then deleted.

Your images are private. Only your signed-in account can open them. The exceptions are short-lived, single-purpose links that let our model and safety providers fetch the images for your job. Results from fal are generated as private files, which we download and store with your account. Payment, credit and refund records are kept for as long as we need them to run your balance, resolve disputes and meet tax and accounting obligations.

Analytics

Analytics is off until you choose "Allow analytics" in the privacy panel. You can change your choice at any time with "Privacy choices" at the bottom of every page; choosing "Essential only" stops analytics and tells our server to ignore any later events from your browser.

If you allow it:

• Our own measurement records the pages you visit, the site or campaign that referred you, your device type (phone, tablet or desktop) and product steps such as using an example, starting a generation, choosing a plan or starting checkout. It never includes your prompts, notes, images or payment details. A random ID stored in your browser links these events; if you are signed in, they are linked to your account so we can see which channels bring paying customers.
• Google Analytics 4 and Microsoft Clarity run on our public pages only (not in the editor, your history, account settings or sign-in pages). Google Analytics counts visits; Clarity shows anonymised heatmaps and session replays, with text fields masked. Advertising features and Google signals are turned off.

We keep raw analytics events for 13 months and then delete them. Google and Microsoft keep their data under their own retention settings and privacy policies.

Cookies and browser storage

We use necessary cookies and browser storage to keep you signed in, protect forms against abuse and remember your choices. Analytics cookies and storage are set only after you allow analytics, as described above. We do not use advertising cookies.

Your choices and rights

You can download your images at any time. To delete images or your whole account, email support@mossimage.app from your account email, and we will confirm once it is done. We may keep limited transaction records where the law requires it. You can also ask for a copy of your information, or ask us to correct it. Depending on where you live, including California, the EU and the UK, you may have further rights under local privacy law. We will not treat you differently for using them.

Children

MossImage is not intended for children under 16, and you must be 18 to make purchases. We do not knowingly collect information from children under 16. Contact us if you believe a child has given us information, and we will delete it.

Changes

We will post any updates here with a new date. If a change significantly affects how we use your information, we will tell you by email or in the app before it applies.