Privacy Policy
What personal data Kromoss collects, why, who processes it and how to access or delete it.
Last updated: October 22, 2026
Kromoss is built so that your images stay yours. This policy explains, in plain terms, what we collect when you use kromoss.net, what we do with it and the choices you have.
The short version
- Your uploads and generated images are private to your account.
- We never sell your data and never use your images to train AI models.
- We keep only what we need to run the studio, bill you and keep the service safe.
- You can delete any image, or your whole account, at any time.
What we collect
When you sign up Your name, email address and, if you use Google sign in, your profile picture.
When you create images The prompts you write, the photos you upload, the images Kromoss generates for you, and technical details about each run (time, status, credits charged).
When you pay Your plan, purchases, invoices and subscription status. Card numbers and bank details are entered on Stripe's checkout and never reach our servers.
When you browse Pages visited, the site or campaign that referred you, and basic device and browser information. We use privacy-friendly analytics that do not build advertising profiles.
When you contact us Your message and email address, so we can reply.
Why we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Generate images and keep your History | Prompts, uploads, results | Contract |
| Manage credits, plans and invoices | Account and payment data | Contract, legal obligation |
| Send sign-in, verification and billing emails | Email address | Contract |
| Block abuse and enforce our content rules | Prompts, uploads, results, usage data | Legitimate interest |
| Improve pages and features | Aggregated usage data | Legitimate interest |
AI processing
To create an image, your prompt and any photos you uploaded are sent to the AI infrastructure partners that run the Kromoss model. They process this data only to return your result and to apply safety checks, and they are not allowed to use it for their own purposes. Uploads are sent for the duration of the request; results are copied back to our own storage.
Who else handles your data
We rely on a small set of service providers, each bound by contract to protect your data:
- Cloudflare: hosting, database and private file storage
- AI infrastructure partners: image generation and safety checks
- Stripe: payments and invoices
- Email delivery provider: account and billing emails
- Analytics provider: privacy-friendly visit statistics
We disclose data to authorities only when the law requires it, or to report child sexual abuse material.
How long we keep it
- Uploads and generated images: until you delete them from History or delete your account.
- Account data: for as long as your account exists.
- Payment records: as long as tax and accounting law requires, usually up to 7 years.
- Server logs: a short rolling period for security and debugging.
Your choices and rights
You can view and delete your images in History, change your details in Settings, and delete your account from Settings at any time. Deleting your account removes your photos, images and personal data, except records we must keep by law.
Depending on where you live (for example under the GDPR in the EU and UK or the CCPA in California) you may also have the right to access a copy of your data, correct it, restrict or object to some processing, and take your data to another service. Email support@kromoss.net and we will answer within 30 days. You can also complain to your local data protection authority.
Security
Files are stored privately and served only to the account that owns them. Connections use HTTPS. Access to production data is limited to the people who need it to run Kromoss.
International transfers
Our providers may process data outside your country. Where required, transfers are covered by safeguards such as the EU Standard Contractual Clauses.
Children
Kromoss is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Changes
If we change this policy in a meaningful way we will update the date above and let you know by email or on the site.
Contact
Privacy questions or requests: support@kromoss.net