Six-IR
Privacy Policy
Six-IR is run by Tyeke's Media ([legal business name and address]). This page explains what we collect when you use Six-IR, why, who else handles it, and how to delete it. Questions: support@six-ir.com.
The short version
- Your photos stay on your device. Resizing, cropping, looks, the cutout, upscale, erase and Vectorize all run in your browser. We never receive those photos.
- The generative AI tools are the exception. When you press Expand, Edit with words, Face swap or Create, that photo and your words go through our server to our AI provider, fal.ai, which sends the result back. We don't keep either.
- An account holds your name, email and library. The library keeps a small preview (about 480 pixels) and the settings of each file you choose to save, not the full photo.
- No ads, no analytics, no tracking. We use one cookie, to keep you signed in.
- You can delete everything. Library, then Account, then Delete my account removes it straight away.
What we collect
| What | Why | How long |
|---|---|---|
| Name and email address | To run your account, confirm your email, and send password-reset links | Until you delete your account |
| Password | To sign you in. Stored only as a scrypt hash; nobody, us included, can read it | Until you delete your account |
| Library saves: a small preview and the settings used | So you can open a file's settings again | Until you delete the save or your account |
| Plan, credits used, and whether your email is confirmed | To give you the right features and credit balance | Until you delete your account |
| Reports you send about an AI result: the tool, the reason and the words you used (never the photo) | To find and stop misuse | [e.g. 2 years]; kept without your name if you delete your account |
| Your internet address (IP) | To limit sign-in attempts, sign-ups and free credits, so the service can't be abused | Held in memory for up to a day; not saved in our database. Our host may keep server logs for [host's log period] |
| Payment details (when Plus goes on sale) | To charge for Plus and credit packs | Handled by Stripe; we never see your full card number |
Photos sent to the generative AI tools pass through our server's memory on the way to fal.ai and are not written to disk. The result comes back the same way.
Cookies and storage
- tm_sid: one essential cookie that keeps you signed in, for up to 30 days. It can't be read by the page's scripts and isn't used for anything else.
- Your browser also keeps a few settings on your device (for example, that you've seen the Vectorize guide) and caches the AI models after their first download so they work faster next time. None of this is sent to us.
We don't use advertising, analytics or tracking cookies, and we don't track you across other sites.
Who else handles your data
| Service | What it handles |
|---|---|
| Render (render.com) | Runs our server and stores the database and its backups |
| fal.ai | The photo and words you send to a generative AI tool, to make the result. See fal.ai's own privacy policy |
| Resend | Your email address and the emails we send you (confirmation and password reset) |
| Stripe (when Plus goes on sale) | Your payment details and billing address |
| Hugging Face and Google | Supply the AI models your browser downloads for the cutout, upscale, erase and smart crop. They see your internet address when your browser fetches a model, but never your photos |
| Unsplash | Hosts the sample photos. Your browser fetches them directly when you pick one |
We don't sell your personal information or share it for advertising.
Faces
Smart crop finds faces with a model that runs in your browser; nothing about a face is sent to us. Face swap sends both photos to fal.ai to make the result, and only after you confirm you have permission from everyone in them. We don't build or keep face templates or any other biometric data.
Your choices and rights
- See or correct your data: email support@six-ir.com.
- Delete your account: Library, then Account, then Delete my account. Your account, library and sessions are removed from our database straight away. Daily backups are kept for 14 days, after which the copies are gone too.
- Get a copy of your data: email support@six-ir.com and we'll send it.
- Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to processing or to complain to your data protection authority. Email us and we'll help.
Legal basis (EU and UK)
We use your account data to provide the service you signed up for (contract), the rate limits and reports to keep the service safe (legitimate interests), and the generative AI tools only when you choose to use them (your consent, which you give each time you press the button).
Children
Six-IR isn't for children under 13, or under 16 in the EU and UK. We don't knowingly collect their information; if you think a child has made an account, email support@six-ir.com and we'll delete it.
Security
Everything travels over HTTPS. Passwords are hashed, sign-in sessions are stored only as hashes, and sign-ins are rate-limited. No system is perfectly secure, but we'll tell you promptly if a breach affects your data.
Changes
If this policy changes in a way that matters, we'll update the date above and tell account holders by email before it takes effect.
