Privacy Policy

Last updated: March 29, 2026

1. Introduction

ImageLayer ("we", "our", "us") provides an AI-powered branded image generation platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, API, and embeddable widget (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Organization name
  • Password (stored as a salted bcrypt hash — we never store plaintext passwords)

Usage Data

We automatically collect:

  • API request metadata (timestamps, endpoints called, response status codes)
  • Image generation counts and credit consumption
  • Widget integration events (generation requests, errors)

Generated Content

Text prompts you submit and the images generated from them are processed to deliver the Service. Generated images are stored temporarily for delivery and may be cached to improve performance. We do not use your prompts or generated images to train AI models.

Brand Kit Data

Brand assets you upload (logos, color palettes, typography settings, style guidelines) are stored securely and used solely to apply your branding to generated images.

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Service
  • Process image generation requests and apply brand customization
  • Track credit usage and enforce plan limits
  • Send transactional emails (account verification, password resets, usage alerts)
  • Monitor service health and prevent abuse
  • Improve the Service based on aggregate, anonymized usage patterns

4. Third-Party Services

We use the following third-party services to operate the platform:

  • Google AI (Gemini, Imagen) — AI image generation. Prompts are sent to Google's API for processing. See Google's Privacy Policy.
  • Cloudflare R2 — Object storage for generated images and brand assets.
  • Lemon Squeezy — Payment processing (Merchant of Record). We do not store credit card numbers. See Lemon Squeezy's Privacy Policy.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

We retain your account data for as long as your account is active. Generated images are retained according to your plan's storage policy. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest, and secure credential storage. For more details, see our Security page.

7. Your Rights

You have the right to:

  • Access your personal data through the Dashboard
  • Update your account information at any time
  • Delete your account and associated data
  • Export your data by contacting us

To exercise these rights, email privacy@imagelayer.io.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact

If you have questions about this Privacy Policy, contact us at privacy@imagelayer.io.