Last updated: April 25, 2026
The data controller for your personal data is Site Factory Digital Agency S.L, VAT number B88047444, registered address at C/ Velero 26, 28220 Majadahonda (Madrid), Spain, contact email: info@sitefactory.es.
Free service (no account): imgflow.io processes your images entirely in your browser. We do not upload your files to any server, do not store them, and have no access to their content. No personal data is collected in this mode.
Pro plan (with account): When you create a paid account we collect: name, email address, billing information (managed by Stripe), and service usage history. We do not store credit card data; that process is managed by Stripe, Inc. under their own PCI-DSS compliant security policies.
Technical data (both modes): We may collect anonymised usage data (pages visited, features used, browser type and OS) via analytics cookies, always with your prior consent.
We process your data for the following purposes:
• Pro service delivery: performance of contract (Art. 6.1.b GDPR).
• Payment and billing management: compliance with legal obligations (Art. 6.1.c GDPR).
• Service communications: legitimate interest or consent (Art. 6.1.a / 6.1.f GDPR).
• Usage analytics and improvement: legitimate interest or consent (Art. 6.1.a / 6.1.f GDPR).
We retain your data for as long as necessary for the contractual relationship and, once terminated, for the periods required by applicable law (tax law: 5 years; commercial law: 6 years). Anonymised analytics data may be retained indefinitely.
Your data may be shared with:
• Stripe, Inc. (payment processor) — USA, under Standard Contractual Clauses approved by the European Commission.
• Vercel, Inc. (hosting infrastructure) — USA, under Standard Contractual Clauses.
• Public authorities when required by law.
We do not sell or share your data with third parties for commercial purposes.
You have the right to: access your data, rectify it, erase it, object to processing, restrict processing, and data portability. You may also withdraw consent at any time without affecting the lawfulness of prior processing.
Exercise your rights by emailing info@sitefactory.es with subject "Data Protection" and a copy of your ID. You have the right to lodge a complaint with your national data protection authority.
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration, including TLS encryption for communications and restricted access to production data.
We may update this policy from time to time. The current version will always be available at imgflow.io/en/privacy. For material changes, Pro account holders will be notified by email.
Site Factory Digital Agency S.L
CIF B88047444
C/ Velero 26, 28220 Majadahonda (Madrid), España
info@sitefactory.es