Cross-Border Data Disclosure
Transfer Regions
Data processed by EzImageTool may be transferred to the regions where our approved service providers operate: a third-party authentication provider (sign-in), a third-party image processing service (image processing), and a third-party payment processing service (payment processing). Providers are described by their role only; specific regions are disclosed upon provider contract confirmation. Page-view data collected by Google Analytics 4 is transferred to infrastructure operated by that provider, which may be located outside your own region; the same applies to Baidu Analytics if you accept all cookies. Choosing "Necessary only" stops this transfer.
Legal Basis
Cross-border transfers are conducted under applicable data protection frameworks as determined by the approved jurisdictions where users access the service.
Data Categories Transferred
Account identifiers, uploaded images (temporarily for processing), payment transaction metadata, and technical request data may be transferred cross-border to the extent necessary for service delivery. Guest trial data is not transferred cross-border: the salted hashes of the client IP address and the browser trial identifier are stored only on our own production server, and the raw values are never stored or transferred.
Retention in Transfer Regions
Image data is retained only for the duration of processing (maximum 31 minutes). Processing results are cleared 24 hours (86,400 seconds) after they are generated, after which the original random download path is no longer available. Salted trial hashes are retained for no more than 90 days. Other data follows the retention periods stated in the Privacy Policy.
Safeguards
We select providers who maintain appropriate security measures. Detailed safeguard information is updated when provider contracts are confirmed.