Website: WhateverGPT.xyz
Last updated: 28 April 2025
WhateverGPT.xyz ("WhateverGPT", "we", "us") offers an online service that lets you transform images you provide ("Original Images") into new, AI-generated images ("Generated Images") using OpenAI's GPT-Image-1 model. This Privacy Policy explains how we handle your personal data when you create an account, purchase credits, and use our services.
Data controller:
Email: support@align.coffee
| Category | What it includes | Collected when | Retention |
|---|---|---|---|
| Account Data | Google-provided name, email, Google UID | At sign-in via Google OAuth | For the life of your account |
| Usage Data | Log-in time-stamps, credit balance, prompt text, Generated Image URLs, IP address, device/browser info | When you use the service | 24 months, then anonymised |
| Payment Data | Last 4 digits of card, card type, billing postcode (processed by Stripe) | During purchases | Stored by Stripe; we keep transaction IDs |
| Support Data | Messages you send to support | When you contact us | 24 months |
We do not store Original Images or unredacted payment card details.
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Provide the service, generate images, maintain accounts | Art 6(1)(b) contract |
| Take payment for credits | Art 6(1)(b) contract |
| Prevent fraud, secure our platform | Art 6(1)(f) legitimate interests |
| Send essential service emails (e.g. credit-low notices) | Art 6(1)(b) contract |
| Send marketing with your opt-in consent | Art 6(1)(a) consent |
We share only what is necessary with:
Where data leaves the UK/EEA (e.g. to OpenAI in the USA) we rely on UK Addendum-to-SCCs and OpenAI's Article 46 UK GDPR safeguards.
Generated Images and prompts remain until you delete them or delete your account. Account deletion triggers permanent removal of personal data within 30 days, save for invoices we must keep for 6 years under HMRC rules.
You may: access, correct, erase, restrict processing, object, port your data, and complain to the ICO (ico.org.uk). Email support@align.coffee to exercise rights.
We use essential session cookies (sb-fskmvvgimcpxbkmctcqn-auth-token) and optional analytics cookies (Plausible, host-EU). Analytics cookies load only after you click "Accept" on our banner. See our separate Cookie Notice for details.
We'll post any updates here and email you if the changes are material. Continued use after the effective date means you accept the revised policy.