Privacy Policy

Last updated: 14 May 2026

Your privacy matters to us. This Privacy Policy explains what personal data we collect, why we collect it, and how we handle it when you use www.rembg.com (the “Service”). “Personal data” means any information that can be used to identify you, including your name, email address, IP address, and usage data such as access times and pages viewed.

Who we are

The Service described here is operated by Marwen Trabelsi (RemBG Deutschland), Schönstraße 51, 13086 Berlin, Germany, who acts as the data controller responsible for your personal data. You can reach us at support@rembg.com or through our contact page.

The data we collect

Uploaded files. When you upload images, we process them only to provide the image editing you request. The image-processing application works exclusively in memory without persistently saving original images or results. Original-image buffers and application references are released immediately after image processing completes. Results are returned directly in the response and their buffers are released after transmission; an aborted request releases its image buffers without delay. Releasing application memory is not a claim of immediate secure overwriting of physical memory. The application does not provide a saved image library, result links, or later retrieval. Images and results are not sent to Firebase for authentication or account administration. We do not use customer images or results, directly or indirectly, for training, fine-tuning, validation, benchmarking, or improving AI models. This prohibition also covers copies, crops, extracted features, and anonymised or pseudonymised derivatives. Logging, debugging, support, and quality assurance do not create an exception. Customer content is not added to training, development, or test datasets or supplied to others for those purposes. Already-trained models are used only to perform the requested editing; they do not learn from customer content.

Network delivery. We use Cloudflare, Inc. for Cloudflare Tunnel (cloudflared) to forward API requests and responses for api.rembg.com to our own servers in Germany without exposing their public IP addresses as the API endpoint. Cloudflare is not engaged to perform image editing. Cloudflare processes IP addresses, HTTP headers, connection metadata, and the images and results carried in proxied requests and responses to connect users with our own processing servers. Its global network may involve processing outside the EEA, including in the United States, under the Cloudflare Data Processing Addendum and applicable transfer safeguards. Image editing itself runs on our own servers in Germany. Public connections use HTTPS/TLS, and Cloudflare connects to the server-side cloudflared connector through an encrypted tunnel. The connector also uses HTTPS/TLS to connect to the image-processing application. Cloudflare acts as a TLS endpoint for the proxied traffic. Cloudflare is not engaged to use customer images for model training or development.

Account data. If you create an account, we collect the email address and authentication details needed to sign you in and maintain your account. We use Google Firebase Authentication for sign-in and Cloud Firestore for account, membership, and subscription-status records. Account identifiers and technical usage counters support usage limits (rate limiting) and abuse prevention. Depending on the Google service and account configuration, these non-image account activities may involve processing outside Germany or the EEA. We determine these account-administration purposes as the controller; they are separate from processing customer image contents on a business customer's instructions.

Contact data. When you contact us, we collect the information you provide — such as your email address and the content of your message — so that we can respond to your query.

Payment data. If you make a purchase, payments are handled by our third-party payment provider, Stripe. We do not store your full card details. We retain transaction records for accounting and financial reporting purposes in compliance with applicable law. We recommend that you also review Stripe’s privacy policy.

Usage data, cookies, and analytics. We collect usage statistics — which never include your uploaded files — to understand and improve the Service. This may involve cookies and similar technologies, including analytics provided by Google. This data helps us measure performance and reliability and is not used to identify you personally beyond what is described in this Policy.

How long we keep your data

The image-processing application handles each request and does not keep an image history for later use. Other personal data is retained only for as long as necessary for the purpose for which it was collected: contact data for as long as needed to handle your query, account data for as long as your account remains active, and transaction records for the retention periods required by applicable accounting and tax law. Aggregated usage statistics, which do not identify you, may be kept for longer.

Security

We implement appropriate technical and organizational measures to protect your data. Encrypted transport and request-scoped, in-memory image processing limit image availability to the active request and reduce exposure without building a retained image collection. Security controls also protect transmission and the active processing itself. The dedicated physical processing servers are owned by the Service operator and are administered and operated by authorized RemBG engineers. centron supplies the surrounding colocation facility, power, cooling, and network connection. Physical access and any additional on-site services are governed by the colocation agreement. No method of transmission over the Internet is completely secure. To the extent permitted by law, we cannot accept warranty or liability for damage resulting from unauthorized access, hacking, or interception of your data by third parties, and you use the Service at your own risk.

Your rights

You have the right to access, correct, delete, and restrict the processing of your personal data. To exercise any of these rights, please contact us using the details below.

Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. If we make significant changes, we will notify you through the contact details you have provided to us or by placing a prominent notice on our website.

Contact us

If you have any questions about this Privacy Policy, or wish to exercise your rights relating to your personal data, please contact us at support@rembg.com or through our contact page.