Privacy Policy

What we collect

We collect only what is needed to generate, store and return your images and to take payment for credits.

• Account: you sign in with Google. We store the verified email address and Google’s stable account identifier. We never receive your Google password.
• Creation inputs: the prompts you write, the model and aspect ratio you choose, and any reference image you upload.
• Results: the images generated for you and the settings used to make them.
• Drafts: unfinished work saved so you can return after signing in or buying credits.
• Orders and credits: your orders, payment status, credit balance and credit history. Card details are entered with the payment provider and never reach Imaglen.
• Technical data: cookies described below, request records used for security and rate limits, and usage statistics when analytics is switched on.

How we use it

• To generate images with the model you select and show you the result.
• To keep your images, drafts, orders and credits available when you sign in again.
• To process purchases, apply credits correctly and avoid duplicate charges or deductions.
• To protect the service with limits and abuse checks, and to answer support requests.
• To understand, in aggregate, which pages and features are used.

Who processes your data

We use these providers to run Imaglen. Each handles your data under its own terms.

• Image model providers: the prompt and any reference image are sent to the provider behind the model you choose so it can create the image. Models offered at launch are expected to include Seedream from ByteDance; the model list in the app shows what is currently available.
• Google: sign-in, and Google Analytics when analytics is enabled.
• Supabase (PostgreSQL) stores accounts, drafts, orders and credit records.
• Cloudflare R2 stores reference images and generated images in a private bucket. Downloads use short-lived links issued after we check the image is yours.
• Waffo Pancake provides the hosted checkout for credit purchases.
• Vercel hosts the website and its API.

How long we keep it

• Drafts and their reference images saved without an account: 7 days.
• Drafts saved in your account: 30 days.
• Generated images: 365 days, after which they can no longer be downloaded and the files are removed from storage.
• Images you delete from My Images are removed from storage.
• Credits do not expire. Order and credit history is kept so that payments and balances stay accountable, even after you delete images.

Cookies

• il_session keeps you signed in for up to 30 days. It is HttpOnly and signed.
• il_anon is a short-lived identifier (about one day) that lets a visitor who is not signed in save a draft and carry it into their account after sign-in.
• Google Analytics sets its own cookies only where analytics is enabled.

Your choices and your data

You can delete individual images at any time from My Images. To ask for a copy of your data, a correction, or deletion of your account data, contact support from the email address on your account. There is no one-click account deletion yet. We may ask you to confirm you own the account first, and we may keep order and credit records where needed to account for payments. Never send your password.

Children

Imaglen is not intended for children under 13, and we do not knowingly collect their data.

Changes and contact

We will update this page when our practices change and revise the date above. Questions about this policy or your data can be sent to our support address.