Privacy Policy

Last updated: July 29, 2026

imagvero ("we", "us", or "our") operates an AI-powered product photography service, available on the web and as an iOS and Android app. This Privacy Policy explains what information we collect, how we collect it, how we use it, who we share it with, and your rights. It applies to every version of the service. By using imagvero, you agree to the practices described here.

Information We Collect

We collect the following categories of information when you use imagvero. We collect it directly from you when you create an account, choose a photo, or make a purchase, and automatically from your device as you use the service:

• Account information: your email address and hashed password (we never store plain-text passwords).
• Product images you upload: the photos you provide as source material for AI generation. A photo is collected only when you actively select it — from your device's camera or photo library in the app, or from your file picker on the web. We do not scan or access your photo library beyond the single image you choose.
• Generated images: the AI-produced outputs created from your uploads.
• Usage and credit data: generation history, credit balance, plan tier, and subscription status.
• Payment data: billing name and last four card digits retained by Stripe; we do not store full card numbers.
• Technical and session data: IP address, device and operating system type, app version or browser type, and authentication session tokens.

Third-Party AI Processing

imagvero relies on third-party AI providers to do two things with your photo: analyze it to identify the product and suggest scenes, and generate the finished images. When you upload a product photo, that image is transmitted to one or more of the following providers for processing:

• Google LLC — image generation (Gemini image models).
• OpenAI, LLC — image generation (gpt-image models) and image analysis (GPT models that identify the product in your photo).
• Black Forest Labs — image generation (FLUX Kontext models).

Before your first photo is sent, the imagvero app shows you this disclosure and asks for your agreement. Nothing is uploaded until you agree, and you can review the disclosure at any time under Settings → Legal → AI data processing.

We send only the minimum data required: the image itself and a generation prompt. Your name, email address, password, and payment details are never shared with these providers. We access each provider through its paid API and grant it no right to use your images for any purpose other than returning the output we requested — including no right to use them to train its models. We require every provider to maintain protections for your data at least equivalent to those described in this Policy. We do not sell your images, and we do not share them with anyone beyond the providers listed above.

How We Use Your Information

We use collected information for the following purposes:

• To provide the service: analyze your uploads to identify the product, run AI generation jobs, and deliver the results.
• To manage your account: authentication, subscription tracking, and credit management.
• To process payments: billing through Stripe for subscription and top-up purchases.
• To communicate: send transactional emails (email verification, password reset, billing receipts).
• To prevent abuse: detect fraud, enforce usage limits, and ensure platform integrity.

Third-Party Service Providers

We share data with the following categories of sub-processors:

• Stripe: payment processing. Stripe collects and stores payment card details under its own PCI-DSS compliance program.
• Cloudflare R2: cloud object storage for uploaded and generated images.
• AI model providers: Google, OpenAI, and Black Forest Labs, for the analysis and generation described in Section 2.
• Email infrastructure: Resend, used to send transactional emails.

Data Retention

We retain your data for as long as your account is active. Specifically:

• Images (uploaded and generated) are retained while your account is active and for up to 30 days after account deletion.
• Account data (email, subscription history) is deleted within 90 days of a verified deletion request, except where retention is required by law.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your account and associated data.
• Portability: receive your data in a structured, machine-readable format.
• Opt-out of sale (CCPA): we do not sell personal data.
• To exercise any of these rights, contact us at the address in Section 9.

Cookies and Sessions

We use a single session cookie to keep you signed in. We do not use advertising trackers, third-party analytics cookies, or fingerprinting technologies. If you sign out, the session cookie is invalidated immediately.

Children's Privacy

imagvero is not directed to children under the age of 13. We do not knowingly collect personal data from children. If we learn that a user under 13 has created an account, we will terminate the account and delete all associated data promptly.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@imagvero.com. We aim to respond within 30 days.