Privacy Policy
Updated November 6, 2026.
Scope and contact
This policy covers information processed when you visit imgsgen.com, create images, purchase a subscription or contact ImgsGen support. For privacy, access, correction, deletion or account closure requests, contact support@imgsgen.com.
Information processed
| Information | Purpose |
|---|---|
| Account and login | Usernames, password hashes and session credentials support account creation, authentication and private studio access. Passwords and server-side session tokens are stored as hashes. |
| Image creation and history | Prompts, negative prompts, character descriptions, selected models, image settings and reference images are processed to fulfill generation requests. Generated images, settings, prompts and timestamps are saved for history and downloads. |
| Subscriptions and credits | Plans, account and order references, payment identifiers, amounts, currency, billing periods, refunds and credit records support purchase confirmation, credit allocation and billing disputes. |
| Network and security | Hosting and network services process IP addresses, request paths, timestamps and errors to deliver pages, diagnose failures and prevent abuse. |
| Support and reports | We receive the email address, message content and account, order or image details you provide to handle requests, reports and appeals. |
Where applicable law requires a legal basis, we rely on providing the requested service, complying with legal obligations, proportionate security interests or consent where required.
Model providers and payments
Generation requests pass through our configured third-party API gateway to the selected model. Model choices include GPT Image, Gemini and Grok. Prompts, settings and reference images needed for your request are sent for processing. Check that you have permission to disclose uploaded content to those services. Upstream retention and model-use practices are governed by their applicable terms and privacy policies.
Payments use Waffo Pancake hosted checkout. Waffo processes the checkout email, billing details and payment instrument information you enter. It sends ImgsGen information needed to confirm orders, subscription status, refunds and credit entitlements. Full card numbers and security codes are handled by Waffo. See Waffo's Privacy Policy.
Live checkout processes real payments. Any separately offered test transactions are simulated.
Before paid generation, submitted text, including character descriptions and negative prompts, is screened through Waffo Prompt Sift to enforce our content rules. We record the job identifier, check time and decision for investigation and troubleshooting. These moderation logs exclude the prompt text and are pruned beyond 30 days when subsequent checks are recorded.
Hosting, email and international processing
Our cloud server hosts the application, account database and stored images. Cloudflare provides DNS and routes support messages to our Gmail mailbox. Public-page analytics use our self-hosted Umami instance.
Hosting, model gateway, email and payment providers may process information outside your country. We use a United States server and international third-party services. Cross-border processing is subject to applicable data-protection requirements. Verify that you have permission to submit content for this processing.
We may disclose necessary information when legally required.
Cookies and analytics
An essential session cookie maintains sign-in and account isolation. Sessions last up to 30 days and signing out revokes the current session. You can manage cookies in your browser. Blocking the session cookie affects account and studio access.
Public pages use our self-hosted Umami analytics service to measure visits and page performance. The configuration excludes URL query strings and fragments and respects browser Do Not Track. The analytics script loads on public content pages. See Umami's privacy explanation.
Storage and safeguards
Account and billing records are stored in the server database. Image files and history are stored on the server. Personal studio access is restricted through sign-in and account ownership checks. We use HTTPS, salted password hashes, hashed session tokens and server file permissions to reduce unauthorized access.
Retention
There is currently no uniform automatic deletion date for accounts or generation history. These records remain available to provide account, history and download features. You can request deletion or account closure through support. Clearing browser cookies or signing out does not delete server records.
Payment, refund and credit records support account entitlements, reconciliation and disputes. Records legally required for accounting, disputes or other obligations may remain for the necessary period after a deletion request.
Website access and error logs rotate daily, retaining the current log and 14 archived files. Support email, backups and upstream provider records may follow separate retention schedules.
Data rights and account closure
Email support@imgsgen.com with your username and the scope of your request. We may need information sufficient to verify account ownership. Do not send passwords, full card details or security codes.
You may request access, correction, deletion or account closure. Download images you need and cancel future payments in the Waffo customer portal before closure. Records needed to meet legal obligations or resolve disputes may be retained as described above.
Where applicable, you may also request restriction or portability, object to processing, withdraw consent or complain to a supervisory authority. Requests concerning information Waffo processes independently can be directed to Waffo through its privacy channels.
Children
Accounts and subscriptions are offered to people aged 18 or older under our Terms of Service. If you believe a minor has provided personal information, contact support so we can investigate and act under applicable law.
Changes
We publish updated versions and effective dates here and give notice of material changes as required by applicable law. See our Terms of Service and Acceptable Use Policy for service rules.