Privacy Policy

1. Overview

We collect the minimum data needed to run your account, bill you (via our payment processor, who handles your card details directly — we never see them), and operate the rendering API reliably. We don't sell your data, and we don't use it for third-party advertising.

2. Data We Collect

• Account data — your email address, and optionally your name. If you sign in with Google, we receive your Google account's email and name. If you use a password instead, we store a salted, one-way hash of it — never the password itself.
• API keys and templates — the API keys you generate, and any templates (HTML, CSS, colors, gradients, fonts, logo URLs, layout choices) you save. Logos and finished designs you upload are stored with Cloudflare (Section 4) and, like rendered images, can be opened by anyone who has their link. Designs are redrawn in your browser before upload, which also removes photo metadata such as location.
• Usage data — timestamps, status codes, cache-hit status, and latency for each render request (including requests that failed), used for your dashboard analytics and quota enforcement. We don't log the rendered image content beyond what's needed to serve and cache it.
• URLs you submit — if you use the URL auto-fetch parameter or the free OG tag checker, the target URL you provide is fetched server-side to read its metadata; we don't store the fetched page content beyond the immediate request. If you ask for AI recommendations, the scan result is sent to Anthropic (Section 4).
• AI recommendation requests — to enforce usage limits we record that you made a request and when. We don't keep the URL or the advice text. What is sent to Anthropic for a request is the checked URL and the tag values our scan found on that page (long values shortened), never your account details.
• Security logs — sign-ups, sign-ins, password resets and email verifications are recorded with the time, the IP address and the browser's user agent, to detect account takeover and abuse. They never contain passwords or tokens.
• Email delivery problems — if an email we send you bounces permanently or you mark it as spam, our email provider tells us, and we keep a one-way hash of your address so we stop emailing it. A record of the event itself (its type and time, without your address) is kept for 90 days.
• Operator action records — when we act on an account (for example blocking it, changing its plan, or deleting it) we record what was done, when, and the email address of the account concerned.
• Billing data — handled entirely by our payment processor (Section 4). We store your plan tier and, once you subscribe, a customer/subscription reference id — never your payment card details.
• Team data — if you invite a team member, we store the invite email address and its acceptance status.
• Support/sales inquiries — name, email, company, and message content if you contact us through a form on the site or by email to support@ogimg.net.

3. How We Use It

We use the data above to:

• Operate your account and the API (authentication, rendering, quota enforcement, caching);
• Process payments and manage subscriptions through our payment processor;
• Send transactional email (welcome, password reset, usage alerts, team invites, receipts);
• Detect and prevent abuse (rate limiting, invalid-key blocking, SSRF protection on fetched URLs);
• Respond to support and sales inquiries;
• Improve the Service based on aggregate usage patterns.

4. Third-Party Service Providers

We rely on the following infrastructure and service providers to operate OGImg, each of whom processes a limited slice of the data above on our behalf:

• Paddle.com Market Ltd — payment processing and billing (our Merchant of Record; they handle your payment card data directly).
• Cloudflare — storage and delivery of rendered images and uploaded logos and designs, and Turnstile, the bot check on our sign-in, sign-up, password, and contact-sales forms (it runs in your browser and may process your IP address and browser details).
• Anthropic — generates the AI recommendations on the OG tag checker for plans that include them. It receives the checked URL and the tag values our scan found, as described in Section 2.
• Sentry — error and performance monitoring for our website and dashboard. Reports contain technical details such as error messages, page URLs, and browser and device information, and a sample of page loads is timed.
• Amazon Web Services (SES and SNS) — transactional email delivery, and the bounce and spam-complaint reports for those emails.
• Hostinger — the virtual private server, located in Indonesia, that runs our website, dashboard, API, and PostgreSQL database. We operate the application and database ourselves; Hostinger provides the machine and its network.
• Upstash — short-lived counters that rate-limit our sign-in, sign-up, password, email-verification, and contact-sales forms. They are keyed by IP address or email address and expire automatically, within 24 hours at most.
• Google — optional OAuth sign-in, if you choose it, and Google Fonts: our servers load fonts from Google when rendering an image, and the dashboard's template editor loads them in your browser for its preview.

5. Cookies

We use only essential, functional cookies: og_session keeps you signed in, and a few short-lived cookies exist only while you sign in with or link Google (to block forged sign-in requests and send you back to the right page). They aren't used for advertising or cross-site tracking, and we use no analytics or advertising cookies. Two third-party services do run in your browser: Cloudflare Turnstile on the sign-in, password, and contact-sales forms, and Sentry error monitoring (see Section 4).

6. Data Retention

We keep your account data for as long as your account exists. Deleting your account (available any time from dashboard settings) permanently and immediately removes your account, API keys, templates, uploaded logos and designs, and usage history, and cancels any active subscription. A few records outlive it for a limited time: security logs (Section 2) are deleted after 90 days and are no longer linked to your account once it is gone; operator action records, which can include your email address, are deleted after 12 months; email bounce and complaint records are deleted after 90 days, while the hash that stops us emailing an undeliverable address is kept; and images we already rendered for you are removed by a daily cleanup once they have not been requested for 90 days and are at least 30 days old. Billing records are retained by our payment processor per their own policies and applicable tax/accounting law, independent of your account status with us.

7. Your Rights

Regardless of where you're located, you can, at any time and without contacting us:

• Access & export your data — use "Export my data" in dashboard settings to download your account, API keys, templates, and usage history.
• Correct your data — update your name and other account details directly in dashboard settings.
• Delete your data — permanently delete your account from dashboard settings.

If you're in Indonesia, these rights are consistent with Law No. 27 of 2022 on Personal Data Protection (UU PDP). If you're in the EU/UK, they're consistent with your GDPR rights. For anything the dashboard doesn't cover, email us at the address in Section 12.

8. Security

Passwords are hashed (never stored in plain text), all traffic is encrypted in transit via HTTPS, and API keys can be revoked and regenerated at any time. Server-side requests to URLs you provide (URL auto-fetch, the OG checker tool) are screened to block requests to private or internal network addresses. No method of transmission or storage is perfectly secure, but we take reasonable, industry-standard measures to protect your data.

9. International Data Transfers

Our application and database run on a server in Indonesia, and our other providers (Section 4) operate globally, so your data may also be processed in countries other than your own, including the United States and the European Union. Where required, these providers maintain their own safeguards for cross-border data transfer (such as Standard Contractual Clauses).

10. Children's Privacy

OGImg isn't directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we'll delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the effective date above when we do, and for material changes, we'll make reasonable efforts to notify you (e.g. by email).

12. Contact

Questions about this policy, or a data request outside what the dashboard covers? Reach us at support@ogimg.net.