Trust Center

Transparency and security are at the core of SimplyPNG.

Security Overview

Learn about our security practices, access controls, and encryption standards.

Data Processing

Understand how we handle, store, and retain your data.

Subprocessors

View the categories of service providers we use to deliver our service.

Vulnerability Disclosure

Report security vulnerabilities responsibly.

Image Retention Policy

How long input and output images are stored — and how to delete them.

Local Tools vs Cloud Processing

SimplyPNG offers both browser-based local tools and cloud-based AI processing. Understanding the difference helps you choose the right workflow.

Local Tools (Browser-Only)

Our free image tools (Marketplace Image Checker, Cost Calculators) run entirely in your browser. Images are never uploaded to any server. All analysis happens on your device using JavaScript and Canvas API.

  • No server upload
  • No data collection
  • Works offline after page load
  • Zero processing cost

Cloud Processing (Background Removal)

SimplyPNG's core background removal uses AI models running on secure GPU infrastructure. Images are uploaded, processed, and input files are deleted immediately after processing.

  • Encrypted in transit (TLS 1.3)
  • Input deleted immediately after processing
  • Output retained per your subscription tier
  • Never used for AI training

We never use your images for AI model training or any purpose other than delivering your processed results.

Compliance & Certifications

Building Our Foundation

SimplyPNG is currently building our security program foundation. While we do not yet hold formal certifications like SOC 2 or ISO 27001, we are actively implementing industry-standard security controls.

TLS Encryption
Active
RBAC
Active
SOC 2
Planned 2027
Pen Testing
Planned

Frequently Asked Questions

Are my images used for AI training?
No. Your images are never used for AI model training. Input images are deleted immediately after processing. Output images are stored only for your access based on your subscription tier.
Where are my images processed?
Background removal uses GPU infrastructure with encrypted connections. Free tools (Image Checker, Padding, Calculators) run entirely in your browser — nothing is uploaded.
How long are my images stored?
Input images are deleted immediately after processing. Output images are retained based on your plan: 90 days (Basic) to 3 years (Creator 2000). You can delete images at any time.
Do you have SOC 2 or ISO 27001 certification?
Not yet. We are building our security program foundation with industry-standard controls aligned with SOC 2 principles. Formal certification is on our roadmap as our enterprise customer base grows.
Can I delete my account and all data?
Yes. Account deletion removes all your data including processed images, account information, and payment records. This is a permanent, irreversible action.
Is my payment information stored securely?
We never store credit card numbers. All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor.

Request Security Documentation

Need detailed security documentation for your due diligence? We provide comprehensive security documentation including vendor-named subprocessor lists under NDA.

Contact security@simplypng.app

For security inquiries: security@simplypng.app

For privacy inquiries: privacy@simplypng.app