Privacy

Your images are never stored.

Every upload is processed in memory (or a temp path during processing) and discarded immediately after the response is sent. Purlo has no image storage layer, no CDN cache of your files, no "recent uploads" history — there is nothing to retain, so nothing is retained.

What Purlo does store, in a small database, is account-level bookkeeping only: accounts, API keys (as SHA-256 hashes, never plaintext), and monthly usage counts against your plan quota. Never image bytes, never image content.

This is also why metadata stripping is on by default (strip: true). Photos routinely carry EXIF data — GPS coordinates, device info, timestamps — that most apps shouldn't be redistributing. Purlo strips it unless you explicitly opt out, while preserving the ICC colour profile so your images don't shift colour.

If you fetch by URL instead of uploading, the same rule applies: the fetched bytes are processed and discarded the same way, and the fetch itself is guarded against reaching internal/private network addresses (see Errors & limits).

No image data. Ever. That's the whole policy.