Privacy Policy

Effective date: August 20, 2026

1. Scope

This Policy covers your use of ImgVid at imgvid.app (the "Service"). It explains what we collect, how we use it, who we share it with, and how we protect it. By using the Service, you agree to it.

The Terms of Service, the Cookie Policy, and the Refund Policy also form part of your agreement with us. This is the one that governs personal information.

2. What we collect

(a) What you give us

1. Account details — your email address, display name, and avatar. If you sign up with an email address, we store a hash of your password, never the password itself. If you sign in with Google, we receive your email address, name, and avatar from Google, along with the tokens needed to keep you signed in.
2. What you create — the prompts you write, the images and other files you upload, the model and settings you choose, and the images and videos that come out.
3. What you send us — anything you write to us by email or through support.

(b) What we collect automatically

1. Session and device — the IP address and browser user agent recorded when you sign in, used to keep you signed in and to spot unusual logins.
2. Country — a country code derived from your network request when you register.
3. Usage — the status, duration, failure reason, and model behind each generation, along with your credit grants, spending, and balance, and your subscription and payment status.
4. Analytics — page views, referrers, and similar statistics. See Section 6.

(c) Payment details

We never see or store your card number, expiry date, or CVV. Checkout runs on a third-party payment provider, usually as Merchant of Record. What reaches us is the order ID, the provider's customer and subscription IDs, the amount, currency, tax, payment and refund status, and the billing email the provider sends back.

3. How we use it

(a) Running the Service — creating and managing your account, carrying out the generations you submit, and storing and showing you the results.

(b) Billing — granting, deducting, refunding, and expiring credits, and handling subscriptions, payments, and refunds.

(c) Communication — email verification, password resets, account deletion codes, and service notices you need to see.

(d) Safety and compliance — moderating content, stopping abuse and fraud, diagnosing faults, and meeting our legal obligations.

(e) Improving the product — measuring which features get used and how models perform, so we can improve generation quality and reliability.

We do not use what you create to train our own models, and we do not sell your personal information.

4. What happens to what you create

(a) Files you upload go to our storage under a random, unguessable link. That link works without signing in, because the model providers need to fetch the file, so do not upload anything you would not want someone else to see. Files uploaded before you sign in are stored the same way.

(b) Your prompt goes through moderation before a generation runs. Anything that breaks the rules is blocked before credits are deducted.

(c) To produce your result, your prompt, files, and settings go to third-party AI model providers. What they do with that data is governed by their own privacy policies.

(d) Results come back to our storage and into your creation history. Only you can see that history, and only when signed in. There is no public gallery, and we never put your work on display.

(e) If you have never paid and have not signed in or generated anything for a long stretch, we delete the files you uploaded and the results you generated 30-60 days after your last use. Deleted files cannot be recovered, so download anything you want to keep. Accounts that have paid are exempt.

5. Who we share with

We do not sell personal information. To keep the Service running, we share what is necessary with these kinds of providers:

(a) Hosting and content delivery — running the site, and storing and serving files and results.

(b) AI models and moderation — carrying out generations and screening prompts. They receive prompts, files, and settings.

(c) Payments — handling subscriptions, payments, and refunds. They receive your email address and order details. We never handle your card details.

(d) Email — sending verification and notification messages. They receive your email address and the message itself.

(e) Analytics — measuring site usage, from de-identified visit data.

(f) Third-party sign-in — if you sign in with an outside account, the basic profile attached to it.

We may also disclose or transfer information when the law requires it, to cooperate with law enforcement, to protect our rights or someone else's, or as part of a merger, acquisition, or sale of assets.

6. Cookies

We use cookies to keep you signed in and to measure site usage. The Cookie Policy lists them, what each one does, how long it lasts, and how to manage them.

7. How long we keep things

(a) While your account exists, we keep your account details, creation history, credits, and transaction records. Section 4(e) covers how long uploaded files and results last. Sessions expire after 7 days at most, and account deletion codes after 10 minutes.

(b) Deleting your account — request it in your account settings and confirm with the code we email you. That starts a 30-day wait, which you can cancel at any point. Once it runs out, we delete your account along with its sessions, linked sign-ins, creation history, credit records, and payment records.

(c) What we retain — some transaction records and logs stay with us, to the minimum needed for accounting, tax, audits, disputes, and fraud prevention. Copies in object storage, backups, and operational logs clear within a reasonable period afterwards, so they do not disappear at the same moment the account does.

8. Security

Passwords are stored as hashes. Traffic runs over HTTPS. The session cookie is httpOnly, with cross-site sending restricted. Creation history is isolated per account and reachable only by you and by staff who need it for operations, support, or fraud prevention. No system is completely secure, so keep your password safe.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us something, write to the address in Section 13 and we will delete it.

10. International transfers

Our servers, and those of the providers in Section 5, may sit outside the country you live in. Using the Service means your information may travel there and be processed there, under data protection laws that differ from your own.

11. Your choices

Sign in at any time to see and update your account details, review your creation history and credit records, or ask us to delete your account. If you want access to specific information, a correction, or a deletion, or you have a question about this Policy, write to the address in Section 13. We will respond within a reasonable time.

12. Changes to this Policy

We may update this Policy. If a change is material, we update the effective date at the top of this page and, where it matters, tell you by email or in the product.

13. Contact

Email: support@imgvid.app