Privacy Notice
Last updated: July 17, 2026 · MetaDataImage is a product of GroundSwell Resources, Inc.
This notice explains what personal information metadataimage.com collects, how we use it, and the choices you have. It applies to the MetaDataImage website and service (the "Service").
Information we collect
- Account information — your email address, password (stored as a secure hash by our authentication provider), and optionally a display name and profile photo.
- Your content — images you upload and the metadata you create. Images processed for a one-off action (inspection or generation) are handled transiently; images you explicitly save to your library are stored until you delete them or your plan's retention limit removes the oldest exports.
- Billing information — handled by Stripe. We store your subscription status and a Stripe customer reference; we never see or store your card number.
- Usage analytics — only if you accept analytics cookies in our consent banner: page views and product events via PostHog, associated with your account id and email.
- Technical data — standard server logs (IP address, browser type, timestamps) kept for security and troubleshooting.
How we use information
- To provide the Service: authenticate you, process images, embed metadata, maintain your library and brand profiles, and meter plan usage.
- To process AI generations: when you use AI features, your image (and any context you attach) is sent to Anthropic's Claude API solely to generate metadata. Under Anthropic's API terms, this data is not used to train their models.
- To bill subscriptions through Stripe and send transactional email (account confirmation, password reset) through Resend.
- To understand product usage and improve the Service (analytics, only with your consent).
We do not sell your personal information, and we do not use your images or metadata to train AI models.
Who we share it with
Only service providers that operate the Service on our behalf: Vercel (hosting and file storage), Supabase (authentication), Upstash (database), Stripe (payments), Resend (email delivery), PostHog (analytics, consent-only), and Anthropic (AI processing). Each receives only what its function requires. We may also disclose information if required by law.
Data retention and deletion
Account data is kept while your account is active. Library exports are retained per your plan's limit (oldest are deleted automatically when you exceed it) and are deleted when you delete them. To delete your account and associated data, email support@metadataimage.com from your account address — we complete deletion requests within 30 days.
Your rights
Depending on where you live (including under GDPR and the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to non-discrimination for exercising these rights. Contact us at the address below and we will respond within the legally required timeframe. You can withdraw analytics consent at any time via the "Cookie preferences" link in the site footer.
Security
Data is encrypted in transit (HTTPS/TLS). Access to production systems is restricted, and passwords are handled exclusively by our authentication provider as salted hashes. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.
International transfers
The Service is operated from the United States, and the providers listed above process data primarily in the US. By using the Service you understand your information will be processed in the US.
Children
The Service is not directed to children under 13 (or 16 in the EU), and we do not knowingly collect their information.
Changes
We will post any changes to this notice here with an updated date, and notify you of material changes by email or in-app notice.
Contact
GroundSwell Resources, Inc. · support@metadataimage.com