GenAgent Trust Hub
Menu

Photoroom

DTier DMedium risk · 39/100
  • Your data trains their AI unless you switch it off in settings.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared only with the providers who run the service.
  • The documents do not say who can read your content.

Your photos train their AI unless you flip a setting; they take a broad license, auto-renew.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy ↗Terms · November 7, 2023 ↗15 min read · professional or legal expert level18 lines verified word for word

Collected

What is collected

Account info, your photos, device and activity data, payments, and cookies.

Read the exact line

Privacy policy

“Data relating to your activity on Photoroom, Communications with Photoroom, Data relating to devices and equipment used”

Training

How it is used

They run the editor and, unless you turn it off, use your uploads to train AI models.

Read the exact line

Privacy policy

“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models.”

Sharing

Who may see it

Staff, hosting and payment vendors, Apple/RevenueCat for refunds, and cookie partners if you agree.

Read the exact line

Privacy policy

“Your Personal data may be transmitted to third-party processors involved in the provision of the Services (technical and hosting service providers, sending of notifications or newsletters, user tracking, management of security incidents, etc.).”

Kept

How long it is kept

Accounts can last until you delete them or two years idle, then some data is archived for years.

Read the exact line

Privacy policy

“Duration of use of the services (=Until the account is deleted by you or up to a period of 2 years from your last connection to your account), and then archived for 5 years”

Controls

Your controls

You can opt out of AI training in account settings and email them to access or delete data.

Read the exact line

Privacy policy

“You can opt-out of this at any time by changing the settings on your account. This opt out shall not have retroactive effect on processing activities already carried out.”

Fine print

The fine print

Subscriptions auto-renew with no refunds; you them.

Read the exact line

Terms of service

“EXCEPT AS OTHERWISE EXPRESSLY SET FORTH IN THESE TERMS, WE DO NOT PROVIDE CREDIT, REFUNDS, OR PRORATED BILLING FOR SUBSCRIPTIONS THAT ARE CANCELED.”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Turn off AI training on your uploads

    Account settings (privacy policy: “changing the settings on your account”)

  2. Cancel at least 24 hours before renewal

    Section 3.4 of the Terms: cancel before the next subscription billing

  3. Request access or deletion of your data

    Email [email protected] or mail Photoroom SAS, 229 Rue Saint Honoré 75001 Paris

  4. Refuse non-essential cookies

    Cookie banner / Cookies Policy referenced in the privacy policy

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

Your photos are used to train their AI unless you change a setting. Turning it off does not undo training already done.

Read the exact line

Privacy policy

“By using Photoroom, you acknowledge that Photoroom processes and uses the images you upload to improve, train and develop Photoroom’s products, services and models.”

For example, a product shot you edit today could be used to teach their background-removal model.

2 · How it is used

You keep ownership on paper, but they get a forever license to use your images for the service, including .

Read the exact line

Terms of service

“to us a , , transferable, , , non-exclusive, worldwide license to use, host, store, reproduce, modify, publish, list information regarding, translate, distribute”

For example, they can keep hosting and processing a photo you uploaded even after you stop paying.

3 · The fine print

If someone sues them because of how you used the app or what you uploaded, you may have to pay their legal bills.

Read the exact line

Terms of service

“Customer agrees to and us and our affiliates, licensors, and our and their respective employees, contractors, agents, officers and directors, from and against any and all claims”

For example, if a photo you uploaded belongs to someone else and they sue Photoroom, you could be on the hook.

4 · The fine print

Paid plans renew on their own and you usually do not get money back if you cancel mid-cycle.

Read the exact line

Terms of service

“Payment obligations are non-cancelable and, except as expressly stated in the Agreement, fees are non-refundable.”

For example, canceling a day after yearly billing still leaves you paying for the rest of the year.

5 · How long it is kept

If you go quiet, they can keep account data for two years and then archive it for five more.

Read the exact line

Privacy policy

“Duration of use of the services (=Until the account is deleted by you or up to a period of 2 years from your last connection to your account), and then archived for 5 years”

For example, an old login email could still sit in archives years after you last opened the app.

6 · How it is used

If you report a bug, a person at Photoroom may look at the photo you send them.

Read the exact line

Terms of service

“You acknowledge and agree that the Photoroom representative may review, decompile or otherwise deconstruct such User Content in order to improve, resolve, or modify the Services”

For example, a support ticket about a failed edit can mean a staffer inspects that image.

7 · How it is used

They say they do not sell California personal data or share it for cross-context ads under .

Read the exact line

Privacy policy

“Photoroom does not “sell” or “share” Personal Data as those terms are defined by the .”

For example, they claim they are not selling your profile to ad networks as a “sale.”

8 · How it is used

There is an in-account switch to stop future use of your images for training.

Read the exact line

Privacy policy

“You can opt-out of this at any time by changing the settings on your account.”

For example, you can open settings and turn off model training so new uploads are not used that way.

9 · The fine print

They can shut your account for almost any reason with only a day’s notice.

Read the exact line

Terms of service

“we may also terminate the Agreement without cause, but we will provide Customer with twenty-four (24) hours prior notice.”

For example, you could lose access tomorrow even if you did nothing wrong, after a 24-hour email.

10 · The fine print

Kids under 13 are not allowed; teens under 18 need a parent’s permission, but they do not describe ID checks.

Read the exact line

Privacy policy

“Our Applications and Services are not intended for and should not be used by children under the age of 13.”

For example, a 12-year-old could still sign up if nobody checks their age.

Words to know

Legal words from the lines above, in plain English.

personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
third parties
Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
service providers
Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
opt out
Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
royalty-free
The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
sublicensable
The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
perpetual
Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
irrevocable
Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
worldwide license
You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
indemnify
You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
affiliates
Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
sell or share
Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
How we got here · grade D · score 39/100 · 15 of 15 policy answers backed by a verified quote · 4 not stated
  • What does the app collect beyond what it needs to work?

    They collect account details, photos you give them, device and activity data, payment history, and cookie/IP data—not only the minimum to edit a picture.

  • Does it record your voice, face or body, and what happens to that?

    Not stated in the documents.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Uploaded images are used to train models unless you turn that off in account settings. The opt-out is not retroactive. API images are excluded.

  • Can employees or contractors read your conversations, and when?

    Not stated in the documents.

  • Are you profiled or tracked for advertising?

    Audience-measurement and social cookies send data to third parties if you consent via the cookie banner.

  • Do they sell or share your data, and can you opt out?

    They share with processors (hosting, notifications, Apple, RevenueCat, Dub) and say they do not sell or CCPA-share personal data.

  • What rights do they take over what you type and what the AI makes?

    You own your content, but you grant a perpetual, irrevocable, sublicensable license to use it to provide the service and to train models unless you opt out.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    You can request deletion, but account data can stay for the life of the account or two years after last login, then five years in archive; payments up to 10 years.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    Not stated in the documents.

  • Do they commit to basic security, and have they leaked data?

    Not stated in the documents.

  • Is there a real age gate, and are teens protected?

    Not for under 13; users under 18 need parent permission. No age-verification method is described.

  • Will they tell you when the rules change, and is the policy specific?

    Terms are dated November 7, 2023 and they say they will give reasonable notice of material changes. The privacy policy has no date and only says they will find a way to inform you.

  • Can they close your account without warning, and can you get your data out first?

    They can end the agreement without cause with 24 hours’ notice. No export process is described in that section.

  • If something goes wrong, who pays?

    Services are as-is, liability is capped at six months of fees, and you must indemnify them for claims tied to your use and content.

  • Do subscriptions renew on their own, and can you get a refund?

    Subscriptions auto-renew. You must cancel at least 24 hours before the next bill. Fees are generally non-refundable. Price hikes get 30 days’ notice.

The privacy policy is 3,348 words at a professional or legal expert level (Flesch reading ease 18.3); the terms are 8,087 words at a professional or legal expert level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton