Privacy Policy

This privacy notice for ImagineMonster ("we", "us", "our") explains how and why we collect, store, use and share ("process") your personal information when you visit our website, create an account, buy credits, or use our AI generators and tools (the "Services"), and when you contact us.

Reading it will help you understand your privacy rights and choices. If you do not agree with our practices, please do not use the Services. Questions go to support@imaginemonster.art.

Information you give us. When you register, buy credits, use the studio or contact us, you may provide:

• account details: your name or display name, email address and password (which we store only as a hash);
• sign-in details from an identity provider, if you choose to sign in with one: the identifier, name, email address and profile picture that provider shares with us;
• payment details: our payment processor collects your card details on its own pages; we receive only the amount, currency, outcome, plan and a transaction reference;
• the content you create with: prompts, scripts, descriptions, reference photos, videos and audio you upload, and the settings you choose;
• the results we make for you: images, videos, audio, 3D files and their thumbnails, together with which of them you like, collect or publish;
• preferences: whether you want to see mature content, the tags you are interested in, and whether you want our newsletter; and
• anything you include in a message to support.

Information collected automatically. When you use the Services we record technical and usage data such as your IP address, browser and device type, operating system, language, the pages and tools you use, timestamps, the credits each job cost, and error and performance logs. Some of this is collected with cookies (see section 6).

Sensitive information. We do not ask for, and you should not upload, information about your health, religion, sexual life, political opinions, or government identifiers. Reference material you upload may incidentally contain such information about you or others; it is processed only to produce the result you asked for.

You are responsible for the accuracy of what you give us and for having the right to share any photo, video or recording of another person.

We process your information to:

• create and manage your account, sign you in, and keep your sessions secure;
• produce the images, videos, audio and 3D models you ask for, which involves sending your prompts and reference material to the AI models that generate them;
• take payment, keep your credit balance right, issue refunds and detect payment fraud;
• show your published creations in the community gallery and let other people like and collect them;
• answer your support requests and tell you about things that affect your account, such as security notices, finished jobs, receipts and changes to these policies;
• send you news and offers, only if you opted in, and always with a way to opt out;
• keep the Services safe: detecting abuse, enforcing our Terms of Service, filtering prohibited content and protecting the rights and safety of everyone using the Services;
• understand how the Services are used so that we can fix problems and improve them; and
• comply with the law and respond to lawful requests.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process your personal information only when we have a valid legal reason to do so:

• Performance of a contract: to provide the Services you signed up for, including running your jobs and taking payment.
• Consent: for optional things such as the newsletter, the choice to see mature content, and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests: to secure and improve the Services, prevent fraud and abuse, and communicate with you about your account, as long as those interests are not overridden by your rights.
• Legal obligations: to keep the records that tax, accounting and consumer law require, and to respond to lawful requests from authorities.
• Vital interests: where necessary to protect someone's life or safety.

If you are in Canada, we rely on your express or implied consent, and on the exceptions permitted by law, such as investigating a breach of an agreement or complying with a legal requirement.

We do not sell your personal information. We share it only with:

• AI model providers, which receive the prompts and reference material needed to generate your results and process them under contractual confidentiality and security obligations;
• our payment processor, which handles your payment details and tells us the outcome;
• hosting, storage, email delivery, monitoring and analytics providers that help us run the Services, each bound to use your data only for the service it provides to us;
• other users, to the extent you publish a creation to the community gallery or your display name appears on it;
• authorities, courts and legal advisers, when the law requires it or when necessary to protect our rights, our users or the public; and
• a successor business, if we are involved in a merger, sale of assets, financing or acquisition, in which case your information may be transferred as part of that transaction under the same protections.

We use a small number of cookies and browser storage entries. Essential ones keep you signed in, protect forms against forgery, remember which sign-in flow you started, and remember preferences such as a collapsed panel or a draft you have not sent. These are necessary for the Services to work and cannot be switched off while you use them.

Where we use analytics to understand how the Services are used, those cookies are non-essential and are set only with your consent where the law requires it. You can control cookies through your browser settings; blocking essential cookies will prevent you from signing in.

If you register or sign in with a third-party identity provider, we receive the profile information that provider makes available, which usually includes your name, email address and profile picture. We use it only to create and secure your account. We do not receive your password for that provider, and we do not post anything on your behalf. What the provider itself does with your information is governed by its own privacy policy.

Our servers and those of our providers may be located in countries other than yours, including countries whose data protection laws differ from those of your home country. Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards recognised by law, such as standard contractual clauses and adequacy decisions, and we require our providers to protect your information to the same standard.

We keep personal information only for as long as we need it for the purposes described here, unless the law requires or permits a longer period.

• Account details are kept while your account exists and are deleted or anonymised within 30 days of you closing it.
• Your uploads and creations are kept while your account exists so that you can find them again. You can delete individual creations at any time, and closing your account deletes them all.
• Payment records are kept for as long as tax and accounting law requires, typically seven years, even after your account is closed.
• Security and error logs are kept for a limited period, generally no longer than 12 months, and then deleted.
• Backups are kept for a limited period and then destroyed, so deleted data disappears from backups on a rolling basis.

We have implemented appropriate technical and organisational measures to protect your personal information, described in more detail in our Security document: encryption in transit, hashed passwords and session tokens, encrypted secrets, access controls, rate limits, signed payment notifications, regular updates and tested backups. Nevertheless, no transmission over the internet and no storage technology can be guaranteed to be completely secure, and we cannot promise that unauthorised third parties will never defeat our security. You access the Services at your own risk and should use a strong password and keep your devices secure.

The Services are for adults. We do not knowingly collect personal information from, or market to, anyone under 18. By using the Services you represent that you are at least 18. If we learn that we have collected information from a person under 18, we will close the account and delete the information promptly. If you become aware of such a case, please contact us at support@imaginemonster.art.

Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw a consent you gave earlier. Withdrawing consent does not affect processing that happened before, or processing that rests on another legal basis.

You can exercise many of these rights yourself: your account settings let you change your name, email, password and preferences, delete creations and close your account. For everything else, write to support@imaginemonster.art. We will act on verified requests within the time the law allows, usually one month.

Marketing. You can unsubscribe from our newsletter at any time with the link in each email or from your settings. We will still send you messages that are necessary to run your account.

If you are in the European Economic Area or the United Kingdom and believe we are processing your information unlawfully, you have the right to complain to your local data protection authority. Swiss residents may contact the Federal Data Protection and Information Commissioner.

Most browsers offer a Do-Not-Track setting. No uniform standard for recognising and honouring such signals has been finalised, so we do not currently respond to them. If a standard is adopted that we must follow, we will update this notice. Where the law gives an opt-out preference signal legal effect, we honour it as the law requires.

If you live in California, Colorado, Connecticut, Virginia, Utah or another state with a comprehensive privacy law, you may have additional rights: to know what personal information we collect, use and disclose; to access and delete it; to correct it; to receive a copy; to opt out of targeted advertising, sales and profiling with legal effects; and not to be discriminated against for exercising these rights. We do not sell personal information and do not use it for targeted advertising.

In the past twelve months we have collected the categories of information described in section 2 for the purposes in section 3 and disclosed them to the categories of recipients in section 5. To exercise a right, contact us at support@imaginemonster.art. We will verify your identity by asking you to confirm information from your account. You may authorise an agent to act for you; we will ask for proof of that authorisation. If we refuse a request, you may appeal by replying to our decision, and we will respond to the appeal within the period the law sets.

California's "Shine the Light" law lets residents ask once a year what personal information we shared with third parties for their direct marketing. We do not share personal information for third-party direct marketing. California residents under 18 who are registered users may request removal of content they posted; write to us and we will remove it from public view, although it may not be completely removed from all systems.

We may update this notice from time to time. The updated version is indicated by the "Last updated" date at the top and takes effect as soon as it is published. If we make material changes, we will let you know by posting a notice on the Services or by sending you an email. Please review this notice regularly to stay informed about how we protect your information.

Questions, comments and requests about this notice or about your information: support@imaginemonster.art.

You can review and change your account information, delete individual creations and close your account from your account settings at any time. Closing your account deletes your profile, your uploads and your creations, and ends any subscription; payment records are kept only as long as the law requires. To request a copy of your data or to ask us to correct or delete information you cannot reach yourself, write to support@imaginemonster.art from the email address on your account.