Privacy Policy

1. Introduction

Welcome to Imagera ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered brand asset generation platform.

Imagera is operated by Nexovia, located at Schaumburg, Illinois, USA. We are committed to protecting your privacy and ensuring transparency about our data practices.

By using Imagera, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when you:

• Create an account: Name, email address, password
• Make a purchase: Billing information (processed securely by Stripe)
• Contact us: Name, email, message content
• Use social authentication: Profile information from Google OAuth

2.2 Usage Information

We automatically collect information about your use of the Service:

• Activity data: Features used, actions taken, time spent
• Device information: Browser type, operating system, device identifiers
• Log data: IP address, access times, pages viewed, referring URLs
• AI interactions: Prompts submitted, content generated, credits used

2.3 Generated Content

We store content you generate using our AI tools:

• Brand information and descriptions
• Generated logos and images
• Marketing copy and text content
• Project metadata and settings

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Create and manage your account
• Process your transactions and manage billing
• Generate AI-powered content based on your inputs
• Store and retrieve your generated assets
• Provide customer support

3.2 Service Improvement

• Analyze usage patterns to improve our AI models
• Enhance user experience and features
• Develop new products and services
• Monitor and prevent technical issues

3.3 Communication

• Send transactional emails (receipts, notifications)
• Provide customer support responses
• Send service updates and important notices
• Send marketing communications (with your consent)

3.4 Security and Compliance

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect our rights and property

4. Data Storage and Security

4.1 Storage Infrastructure

Your data is stored securely using industry-leading cloud providers:

• User data: PostgreSQL database hosted on Neon (encrypted at rest)
• Generated assets: Azure Blob Storage with dedicated per-user containers
• Authentication: Clerk with enterprise-grade security
• Payments: Stripe (PCI DSS compliant, we don't store card details)

4.2 Security Measures

We implement multiple layers of security:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for all stored data
• Regular security audits and monitoring
• Access controls and authentication
• Automated backup systems
• AI security measures (prompt injection prevention, content filtering)

4.3 Data Retention

We retain your data for as long as your account is active and as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records (typically 7 years for financial data)

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers:

• Clerk: Authentication and user management
• Stripe: Payment processing
• OpenAI: AI model access for content generation
• Azure: Cloud storage for generated assets
• Mailjet: Transactional email delivery
• Vercel: Application hosting

These providers are contractually obligated to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests
• Protecting our rights and safety
• Preventing fraud or illegal activity

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 Access and Portability

• Request a copy of your personal data
• Export your generated content
• Receive data in a structured, machine-readable format

6.2 Correction and Deletion

• Update or correct your personal information
• Request deletion of your account and data
• Remove specific generated content

6.3 Control and Objection

• Opt out of marketing communications
• Withdraw consent for data processing
• Object to automated decision-making
• Restrict processing of your data

6.4 Exercising Your Rights

To exercise any of these rights, please contact us at support@imagera.pro. We will respond to your request within 30 days. You may also access and manage much of your data directly through your account settings.

7. Cookies and Tracking

7.1 Types of Cookies We Use

• Essential cookies: Required for basic functionality (authentication, security)
• Performance cookies: Help us understand how you use the Service
• Functional cookies: Remember your preferences and settings

7.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may limit your ability to use certain features of the Service.

8. AI and Data Processing

8.1 How We Use AI

We use AI models from OpenAI and other providers to generate content. When you submit prompts:

• Your prompts are sent to AI providers for processing
• We may log prompts and outputs for quality improvement
• We implement security filters to prevent harmful content
• Generated content is stored in your dedicated storage container

8.2 AI Security Measures

We implement enterprise-grade AI security:

• Prompt injection detection and prevention
• Content safety filtering
• Rate limiting to prevent abuse
• Audit logging of all AI interactions
• Circuit breakers for service protection

9. Children's Privacy

Imagera is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@imagera.pro, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.

We ensure appropriate safeguards are in place to protect your information, including:

• Standard contractual clauses approved by regulatory authorities
• Compliance with applicable data protection laws
• Use of service providers with strong privacy commitments

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of sale of personal information (we don't sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, contact us at support@imagera.pro with "California Privacy Rights" in the subject line.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your data includes:

• Contract: Processing necessary to perform our service contract
• Legitimate interests: Improving our service, fraud prevention
• Consent: Marketing communications (you can withdraw anytime)
• Legal obligation: Compliance with laws and regulations

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email to your registered email address
• Display a prominent notice on the Service
• Request your consent if required by law

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.

15. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at support@imagera.pro with "DPO" in the subject line.