Privacy Policy

Last updated October 27, 2026

1. Who we are

The Hungry JPEG is run by Inmagine Lab Pte Ltd, 36 Robinson Road, #20-01 City House, Singapore 068877 (“we”, “us”). We decide how your personal data is used for the Service and are responsible for it (the “controller”). Our Data Protection Officer can be reached at info@123rf.com. Words like “Service” mean the same as in our Terms of Use.

2. What we collect

• Account: your email address, name, handle and a scrambled (hashed) password; or, if you sign in with Google, the name, email address and profile picture Google shares with us. What you add to your profile, such as a bio or website.
• What you make and do: your prompts and chosen options, the vectors made for you, your edits, collections and saved vectors, what you share, and reports you send.
• Credits and payments: a record of every credit you receive and spend, your downloads, and for purchases the pack, amount, currency, date, payment status and the payment provider's reference, plus the card brand and last four digits it shares with us. We never receive your full card number or security code.
• AI apps and API keys: the apps you connect and keys you make, their names, daily limits, when they were last used and what they did; keys and tokens are stored only in scrambled (hashed) form.
• Messages: what you send us by email, and our replies.
• Technical data: your IP address, browser and device details, a device identifier stored in a cookie, the pages and actions you request, and error logs. We use these for security, to limit abuse (for example how many welcome credits one network or device can get) and to fix problems.

3. Why we use it

• To provide the Service you asked for: your account, making, storing and showing your vectors, the editor, downloads, credits and payments, connected AI apps and the API (our contract with you).
• To keep the Service safe and fair: checking prompts and results against our rules, preventing fraud, multiple accounts and credit abuse, enforcing our Terms and protecting our rights (our legitimate interests, and in some places our legal obligations).
• To run and improve the Service: fixing faults, understanding which features are used, and planning (our legitimate interests). We don't use your private prompts or private vectors to train AI models.
• To contact you about your account, purchases, security and important changes (our contract with you). We will only send marketing emails if you agree, and every one will let you unsubscribe.
• To meet legal duties, such as keeping payment and tax records and answering lawful requests from authorities.

Automated checks. Prompts and results are checked automatically (including by AI models) for content our Terms don't allow, such as real brands, known characters and sexual content. A check can block a prompt before you are charged, or keep a result private. These checks don't have legal or similarly significant effects on you; if you think one got it wrong, contact us and a person will look at it.

4. What other people can see

Vectors you share, with their titles, tags and your name and handle, are public and may appear in search engines and in our promotions. Your public profile shows what you add to it and what you share. Your prompts, email address, credits, purchases and private vectors are never shown to other users.

5. Who processes data for us

We share personal data only with the following, and only as needed for the purposes above:

• AI providers that make and check vectors: OpenRouter (which routes requests to Meta's Muse image model, Anthropic's Claude models, which write design briefs, titles and tags and help review results, and to models that turn search words into numbers for search by meaning), fal.ai (Ideogram's vector models and a background-removal model) and OpenAI (content moderation). They receive your prompts, options, search words and the pictures and designs being made or checked, not your name or email address, and process them under their own terms to provide their service to us.
• Amazon Web Services: hosting, databases, file storage, content delivery and sending email.
• Adyen: payments, fraud screening, refunds and chargebacks.
• Google: sign-in with Google and its one-tap sign-in prompt, if you use them. Cloudflare: the bot check (Turnstile) on the email sign-up and password-reset forms.
• AI apps you connect (for example Claude or ChatGPT) receive the results of what they ask for, such as your vectors, their files and your credit balance, under their own privacy policies.
• Our group companies and professional advisers, where needed to run the business; authorities when the law requires it or to protect rights and safety; and a buyer or successor if our business is sold or reorganized, under the same protections.

We don't sell your personal data, and we don't share it for targeted advertising.

6. International transfers

We are based in Singapore, our servers are in the United States, and our providers process data in the United States and other countries. When personal data leaves your country we protect it as required by the laws that apply, for example with the European Commission's standard contractual clauses or the providers' own transfer safeguards.

7. How long we keep it

• Account data, what you made and connections: while your account is open.
• When you close your account we delete or anonymize your account data and private vectors within 30 days; backups that still hold them are overwritten within a further 35 days.
• Payment and credit records: as long as tax and accounting law requires, usually up to 7 years.
• Security and abuse-prevention data, such as IP counters and logs: usually up to 12 months, longer if needed for an investigation.
• Vectors you shared that other people downloaded stay usable by them under their license, and may stay in published promotions, but are removed from the library.

8. Security

We encrypt data in transit, scramble (hash) passwords, keys and tokens, restrict who can access data, and use our providers' security controls. No system is completely secure; if a breach affects your personal data in a way that puts you at risk, we will tell you and the authorities as the law requires.

9. Your choices and rights

You can update your profile on your account page, stop sharing any vector, disconnect AI apps and delete API keys at any time. Depending on where you live, you also have rights to: access your data and get a copy in a portable form; correct it; delete it; restrict or object to how we use it (including objecting to uses based on our legitimate interests); and withdraw any consent you gave. Email info@123rf.com from the address on your account; we may ask you to confirm it's you, and we reply within the time the law requires (usually a month). Some data we must keep, for example payment records.

• Singapore: you may ask to access and correct your data and withdraw consent, and complain to the Personal Data Protection Commission.
• EU, EEA and UK: you may complain to your local data protection authority.
• California and other US states: you may ask what we collect, and to delete or correct it, and we won't treat you differently for asking. We don't sell or share personal data for cross-context behavioral advertising, and we don't use sensitive personal data to infer things about you.

10. Cookies

• Sign-in: keeps you signed in.
• Device: a random identifier that lets us give welcome credits once per device and limit abuse.
• Google and Cloudflare: sign-in with Google and the bot check set their own cookies when used, under their policies.

These are all needed for the Service to work or stay secure, so we don't ask for consent to them. We don't use advertising or analytics cookies. If we ever add cookies that need your consent, we will ask first.

11. Children

The Service is not for children under 13, and we don't knowingly collect their personal data. Teenagers under 18, or under the age of digital consent where they live, need a parent or guardian's permission. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes

We may update this policy. We'll show the date at the top and tell account holders about important changes before they apply.

13. Contact