Privacy Policy

This Privacy Policy describes how "Background Remover for Drive - Fractal Apps" ("the App"), provided by Fractal Apps LLC ("the Company"), collects, uses, and discloses information when you use the App and related services (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Scope

This Privacy Policy applies to information processed through the Service, including within Google Drive™ and any related websites, backend services, or support channels operated by the Company.

2. Google API Services User Data Policy (Limited Use)

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

The App accesses Google user data via Google APIs. The App's use of that data is limited to providing or improving user-facing features. We do not use Google user data for advertising, do not sell, rent, or trade it to any third party, and do not use it — whether raw, aggregated, anonymized, or derived — to create, train, or improve foundational or generalized artificial intelligence or machine learning models. Specifically, we do not use Google user data for any of the following purposes: targeted or personalized advertising, selling to data brokers or information resellers, determining credit-worthiness or for lending purposes, creating databases, or training AI models.

3. Artificial intelligence and machine learning

Background removal is performed by a third-party AI service. We use exactly one such provider:

• Replicate, LLC (replicate.com) — accessed under a standard pay-as-you-go account. The App runs two open-source image-segmentation models on Replicate's inference API: 851-labs/background-remover for standard processing, and fottoai/remove-bg-2 when you use the "Try again" option to reprocess a result.

Only the contents of an image file you have explicitly approved are sent to Replicate. Our backend downloads that image, transmits it to Replicate, and receives a processed image in return. No other Google user data is transmitted to Replicate — not your email address, your Google access token, your file names or file identifiers, the names or contents of any other file in your Drive, or any account metadata.

The models used are fixed, pre-trained, and inference-only. They do not learn from the images they process. We do not fine-tune them, create derivative models from them, or otherwise use your images or any data derived from them to create, train, or improve any foundational or generalized AI or ML model, and we do not authorize any third party to do so with data we transfer to them. Replicate's terms limit its use of customer inputs and outputs to what is necessary to provide the requested output and its services.

The App does not integrate with any other AI or ML service provider, and does not send Google user data to any AI or ML service other than the one named above.

4. Google user data we access

The App requests the following Google OAuth scopes and accesses the corresponding Google user data:

• Email address (via the userinfo.email scope) — used to identify your account for managing your free usage quota and subscription status.
• Names of the items you select in Google Drive™ (via the drive.addons.metadata.readonly scope) — used to show you a list of the files you have selected so you can choose which ones to process. This scope provides item names and identifiers only, and does not allow the App to read the contents of any file.
• Image files you select and approve (via the drive.file scope) — used to read the image files you choose to process, and to save the background-removed result as a new file in the same folder. This scope provides per-file access only: the App can open a file solely after you have explicitly granted it permission to that specific file, and it cannot see, list, search, or open any other file in your Google Drive™.
• External network requests (via the script.external_request scope) — used to communicate with our backend server for job processing and subscription management, which in turn sends your approved images to Replicate for background removal (see Section 3).

When you select files in Google Drive™, Google provides the App with the name and file identifier of the selected items so that the App can list them and ask you which to process. The App cannot read the contents of any of those files until you grant it permission to that specific file.

5. How processing works, and the data sent to our backend

Background removal is not performed inside Google. When you start a job, the App sends the following to our backend server (operated by the Company on Railway) so that it can perform the work:

• A short-lived Google access token. This token authorizes our backend to read the specific image files you approved and to save the results back to your Google Drive™ on your behalf. The token is used only in memory for the duration of your job, is never written to our database, and is never logged. It expires automatically (typically within one hour) and grants access only to the files you approved — never to the rest of your Drive. The token is never transmitted to Replicate or any other third party.
• The identifiers of the files to process, and your chosen file-name suffix.

Using that token, our backend downloads each approved image, sends it to Replicate for background removal (see Section 3), receives the processed image, and writes the result back to your Google Drive™ as a new file. The identity used for your quota is derived from the access token itself, not accepted from the client, to prevent one user's activity from being attributed to another.

If you use the "Try again" option on a result, the App re-reads the original image, processes it again using an alternative background removal model, and replaces the contents of the file the Service previously created for that image. Your original image is still not modified, but the earlier result is overwritten and cannot be recovered through the App.

6. Other information we collect

A. Job records

To run and report on a background-removal job, our backend temporarily stores a job record containing your email address, which App you used, the job status, and per-file details (the file name, the resulting file's identifier, and any error message). These records do not contain image contents or your access token. Job records are automatically deleted a short time after the job completes (by default, within a few hours).

B. Usage and diagnostic data

We may collect usage and diagnostic data such as feature usage counts, timestamps, error logs, and device/browser information to operate, maintain, and improve the Service. Error logs may include your email address, the name of the App feature that failed, and the associated error message, so that we can diagnose and resolve issues.

C. Payment information

If you subscribe to the Pro plan, payment is processed by Stripe. We do not store your credit card number or full payment details. Stripe may collect information as described in Stripe's Privacy Policy.

D. Cookies (website only)

If we operate a marketing or documentation website for the Service, that website may use cookies or similar technologies to operate and remember preferences. You can refuse cookies in your browser settings; however, some features may not work.

E. Shared account across our Apps

The Company also offers versions of the App for Google Docs™ and Google Slides™. All of these Apps share a single account record identified by your email address, including your free usage count and subscription status. If you use more than one of them, your usage in one is recorded against the same account as the others. Your files, documents, and presentations are not shared between the Apps — only the account record described in this section.

7. How we use information

We use the information we access or collect solely to:

• Provide and operate the Service (background removal, subscription management)
• Read the image files you approve and save the results to your Google Drive™
• Identify your account and track your usage quota
• Process payments via Stripe
• Provide support and respond to inquiries
• Monitor performance, reliability, and security
• Fix bugs and improve the Service
• Comply with legal obligations

We do not sell, rent, or trade your Google user data to any third party. We do not use your data for advertising or any purpose unrelated to providing or improving the Service.

8. Data retention and deletion

We retain personal data (such as your email address and usage count) only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

Image data is processed transiently. Your approved image is downloaded by our backend, sent to Replicate for processing, written back to your Google Drive™ as a new file, and then discarded from our backend. We do not retain copies of your images after a job completes. The Google access token used to perform this work is held only in memory for the duration of the job and is never stored. Retention of image data by Replicate is governed by Replicate's Privacy Policy.

Job records (see Section 6A) are deleted automatically a short time after the job completes. Files created by the Service are stored in your own Google Drive™ and remain under your control; the Company does not keep a copy of them, and you can delete them at any time from Google Drive™.

To request deletion of your data, email support@fractalapps.dev. We will process deletion requests within 30 days. Because your account record is shared with our Google Docs™ and Google Slides™ Apps (see Section 6E), a deletion request will remove your account data for all of them. You can also revoke this App's access at any time from your Google Account permissions page.

9. Disclosure of information

We do not sell, rent, or trade your information to third parties. We may disclose information only in the following circumstances:

• To service providers who process data on our behalf and are contractually obligated to protect it (see Section 10)
• Where necessary to comply with applicable law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of the Company, our users, or the public
• To prevent fraud, abuse, or security issues

10. Third-party service providers

We use the following third-party service providers to operate the Service. These providers access information only to perform tasks on our behalf and are obligated not to use it for other purposes:

• Replicate — AI image processing. Images you approve are sent to Replicate's API solely for background removal, in accordance with Replicate's Privacy Policy. See Section 3 for details of this integration.
• Railway — Cloud hosting for our backend server, which performs the background-removal jobs and stores your email address, usage count, subscription status, and temporary job records.
• Stripe — Payment processing for Pro subscriptions. Stripe handles payment data in accordance with Stripe's Privacy Policy.
• Resend — Email delivery, used to send service-related emails to your address.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption of data in transit (HTTPS/TLS) and secure authentication for API communications. Access tokens are held only in memory during processing and are never persisted. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International data transfers

Your information may be processed in countries other than your own depending on where the Company and its service providers operate. Where required, we take steps designed to ensure appropriate safeguards are in place for cross-border transfers.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal data. To exercise any of these rights, contact us at support@fractalapps.dev. We will respond to your request within 30 days.

14. Children's privacy

The Service is not intended for children under the age of 13 (or a higher age threshold where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us and we will take steps to delete it.

15. Links to other websites

The Service may contain links to third-party sites not operated by us. We are not responsible for the content or privacy practices of those sites. We recommend reviewing their policies before providing information.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Changes are effective when posted. Your continued use of the Service after changes become effective constitutes acceptance.

17. Contact

If you have questions about this Privacy Policy, contact us:

• Fractal Apps LLC, an Illinois limited liability company
• By email: support@fractalapps.dev

Google Drive™, Google Docs™, and Google Slides™ are trademarks of Google LLC.

Last updated on July 24, 2026