Privacy Policy

Last updated: April 28, 2026

At icandothat.ai, your privacy is fundamental to everything we build. This policy explains what we collect (the photos and inputs you provide while using a tool — no name, email, or account), what we do with them (improve our own tools, and only that), which third-party AI providers process your inputs in the request loop, and how third-party advertising works on our site.

Information We Collect

We do not require an account, login, or signup to use our tools. We don't ask for your name, email address, or phone number. The only data we hold about you is the photos and inputs you provide while using a tool, which we keep tied to an anonymous session ID rather than to you. Standard server-side request metadata (your IP address, user agent, and request timestamp) is processed for rate-limiting and abuse prevention. Rate-limit counters keyed to your IP expire automatically within 25 hours and are not used for any other purpose.

When you use a tool, your inputs (photos, descriptions, condition selections, and damage notes) are uploaded to secure storage on Cloudflare and bound to a randomly generated, anonymous session ID. That session is not linked to you in any way — there is no account, no email, and no identifier that could connect the data back to a specific person. Your active session expires automatically one hour after your last action.

How We Handle Your Uploads

Before any photo leaves your browser, it is normalized in the browser itself: HEIC files are converted to a standard format and oversized images are resized down. Only the normalized version is uploaded. Those files are then stored on Cloudflare R2 under a session-scoped path. Item identification is sent to Google Gemini (with a Google Lens fallback for hard cases); the listing draft is generated by OpenAI. The result is returned to your browser.

We retain your inputs (photos, descriptions, and damage notes) on our storage for up to six months after upload, after which they are deleted by an automatic Cloudflare R2 lifecycle rule. During that retention window, we use your inputs solely to improve our own tools — better identification accuracy, better pricing logic, and better listing drafts for future users. We do not share your inputs with anyone outside the AI providers in the request loop, and we do not sell your inputs to anyone. Because there is no account or identifier connecting your inputs to you, retained data is not linked to a person.

Cookies & Tracking Technologies

icandothat.ai itself does not use cookies for tracking or analytics. However, our third-party advertising partners, including Google, may use cookies to serve ads based on your prior visits to this site or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to icandothat.ai and/or other sites on the Internet.

Third-Party Advertising

We use Google AdSense and Google's Interactive Media Ads (IMA) SDK to display advertisements on our site. These services may collect and use data about your browsing activity to provide personalized advertising. You can learn more about how Google uses your data by visiting Google's Privacy & Terms.

You may opt out of personalized advertising by visiting Google Ads Settings. You can also visit aboutads.info to opt out of third-party cookies used for personalized advertising.

AI-Powered Analysis

Our tools use third-party AI services, split by task. The data handed to each provider is limited to what that provider needs for its step.

• Google Gemini — Item identification (figuring out what your photo shows). Receives the photos you upload plus the condition and damage notes you enter. See Google's privacy policy.
• SerpAPI (Google Lens) — Image-search fallback used when Gemini's confidence is low. We send only your first uploaded photo to SerpAPI's reverse-image-search API to look for matching products on the open web. SerpAPI receives only that single image's bytes; no other photos, no condition notes, no account info (we don't have one to send). See SerpAPI's privacy policy.
• OpenAI — Listing-draft generation (the title and description text). Receives the identified item details and your condition notes; does not receive your raw photos. See OpenAI's privacy policy.

None of these requests include your name, email, or any account identifier — because we don't collect those in the first place. Each provider processes your data according to its own privacy policy linked above.

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. Since we do not collect personal information from any users, this applies broadly to all visitors.

Related Policies

For more information about how our site operates, please also review our Disclosures page, which covers advertising, affiliate relationships, AI-generated content, and accuracy disclaimers. Our Terms of Service govern your use of the site.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us at info@icandothat.ai.