Privacy Policy
Last Updated: 08/Oct/2025
1. Introduction
PNG UP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our image hosting service ("Service"). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
2.1 Information You Provide to Us
We collect information that you voluntarily provide when using our Service:
- Account Information: When you create an account, we collect your email address, username, optional name, and encrypted password.
- Payment Information: When you purchase a plan, payment data is processed by our third-party payment processor (Stripe). We receive transaction confirmations but do not store complete credit card information.
- Uploaded Content: Images and files you upload to our Service, along with associated metadata such as filenames and upload timestamps.
- Communications: Information you provide when you contact us for support, feedback, or inquiries.
2.2 Information Collected Automatically
When you access our Service, we automatically collect certain information:
- Log Data: IP addresses, browser type and version, operating system, referral URLs, pages viewed, and timestamps of access.
- Device Information: Device type, unique device identifiers, and mobile network information.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity and maintain session information. See Section 8 for more details.
- Usage Data: Information about how you interact with our Service, including features used, actions taken, and time spent.
2.3 Information from Third Parties
We may receive information from third-party services such as payment processors (Stripe) to verify transactions and prevent fraud. We do not purchase or obtain personal information from data brokers.
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To create and manage your account, process uploads, store and display images, and provide core functionality.
- Payment Processing: To process transactions, manage subscriptions, and maintain billing records.
- Communication: To send service-related notifications, security alerts, account updates, and respond to support requests.
- Service Improvement: To analyze usage patterns, identify trends, troubleshoot technical issues, and enhance user experience.
- Security and Fraud Prevention: To detect, prevent, and address security incidents, fraudulent activity, and abuse of our Service.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
- Business Operations: To enforce our Terms of Service, resolve disputes, and protect our legal rights.
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:
4.1 Service Providers
We engage trusted third-party companies to perform services on our behalf, such as:
- Payment processing (Stripe, Inc.)
- Cloud hosting and infrastructure providers
- Email delivery services
- Analytics and monitoring tools
These service providers have access to your information only to perform specific tasks and are obligated to protect your data in accordance with this Privacy Policy and applicable data protection laws.
4.2 Legal Requirements and Protection of Rights
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (subpoenas, court orders, or government requests)
- Enforcement of our Terms of Service or other agreements
- Protection of our rights, property, or safety, or that of our users or the public
- Investigation of potential violations of law or policy
- Prevention of fraud, security threats, or illegal activity
4.3 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.
4.4 Public Content
Images you upload and share publicly via direct links are accessible to anyone with the link. Please be mindful of what you choose to share publicly.
4.5 With Your Consent
We may share your information for other purposes with your explicit consent or at your direction.
5. Data Security
We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit (HTTPS/TLS) and at rest
- Secure password storage using industry-standard hashing algorithms
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and privacy practices
- Incident response procedures and monitoring systems
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
6. Data Retention
We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account Information: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations.
- Uploaded Images: Retained according to your selected plan (free, Decade, Generation, or Century). Unclaimed images may be deleted at any time as described in our Terms of Service.
- Log Data: Typically retained for 90 days for security and troubleshooting purposes, unless longer retention is required by law.
- Payment Records: Retained as required for tax, accounting, and legal compliance purposes (typically 7 years).
Upon account deletion, we will delete or anonymize your personal information, except where retention is required for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, dispute resolution).
7. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information:
7.1 Access and Portability
- Request access to the personal information we hold about you
- Receive a copy of your data in a structured, commonly used format (data portability)
7.2 Correction and Update
- Correct inaccurate or incomplete information
- Update your account information through your account settings
7.3 Deletion
- Request deletion of your account and associated personal information
- Delete individual uploaded images from your account
7.4 Objection and Restriction
- Object to certain processing of your personal information
- Request restriction of processing in certain circumstances
7.5 Withdraw Consent
- Withdraw previously given consent for data processing (where consent is the legal basis)
7.6 Exercising Your Rights
To exercise any of these rights, please contact us at our info email address. We will respond to your request within the timeframe required by applicable law (typically 30 days). We may require verification of your identity before processing your request.
7.7 Complaints
If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with a supervisory authority in your jurisdiction.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and collect information about usage.
8.1 Types of Cookies We Use
- Essential Cookies: Required for basic functionality, such as session management and authentication.
- Performance Cookies: Collect information about how you use our Service to help us improve it.
- Functional Cookies: Remember your preferences and settings.
8.2 Managing Cookies
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may limit your ability to use certain features of our Service.
9. Third-Party Links and Services
Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.
Specifically, payment processing is handled by Stripe, Inc., and your payment information is subject to Stripe's Privacy Policy.
10. Children's Privacy
Our Service is not directed to individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction. By using our Service, you consent to the transfer of your information to such countries.
We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy and applicable data protection laws, including the use of standard contractual clauses or other lawful transfer mechanisms.
12. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:
- Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: We do not sell personal information. If our practices change, we will update this policy and provide an opt-out mechanism.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise these rights, contact us at our info email address. We will verify your identity before processing your request.
13. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Access, rectification, erasure, and restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent (where processing is based on consent)
- Right not to be subject to automated decision-making
Our legal bases for processing your information include: (a) consent, (b) performance of a contract, (c) compliance with legal obligations, and (d) legitimate interests (e.g., fraud prevention, service improvement).
14. Do Not Track Signals
Some browsers have a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no universal standard for how DNT signals should be interpreted. We do not currently respond to DNT signals.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to the address associated with your account
- Displaying a prominent notice on our Service
Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at our info email address.
For specific data protection inquiries or to exercise your privacy rights, please include:
- Your full name and email address associated with your account
- A description of your request or concern
- Any relevant supporting documentation
We will respond to your inquiry within a reasonable timeframe as required by applicable law.