Privacy Policy

1. Introduction

ImageLayer ("we", "our", "us") provides an AI-powered branded media generation platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, API, and embeddable widget (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Organization name
• Password (stored as a salted bcrypt hash — we never store plaintext passwords)

Usage Data

We automatically collect:

• API request metadata (timestamps, endpoints called, response status codes)
• Media generation counts, output modes, selected models, and credit consumption
• Widget integration events (generation requests, submissions, errors)
• Client-side error reports when browser code fails in the dashboard or marketing experience

Generated Content

Text prompts you submit and the images, video, audio, voice, and text generated from them are processed to deliver the Service. Generated media is stored temporarily for delivery and may be cached to improve performance. We do not use your prompts or generated media to train AI models.

Brand Kit Data

Brand assets you upload (logos, color palettes, typography settings, style guidelines) are stored securely and used solely to apply your branding to generated media.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process media generation requests and apply brand customization
• Track credit usage and enforce plan limits
• Send transactional emails (account verification, password resets, usage alerts)
• Monitor service health and prevent abuse
• Improve the Service based on aggregate, anonymized usage patterns

4. Third-Party Services

We use the following third-party services to operate the platform:

• Google Cloud Vertex AI (Gemini, Veo, TTS) — Media generation and speech synthesis. Prompts and generation requests are processed through Google's managed AI infrastructure. See Google's Privacy Policy.
• Cloudflare R2 — Object storage for generated media and brand assets.
• Cloudflare Turnstile — Bot protection for signup, password recovery, and preview surfaces.
• Lemon Squeezy — Payment processing (Merchant of Record). We do not store credit card numbers. See Lemon Squeezy's Privacy Policy.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

We retain account data for as long as your account is active. Temporary generated media is cleaned up on a rolling TTL, currently targeted at roughly 72 hours. Brand assets and account records stay available until you close the account or request deletion. Deletion requests are handled through our support workflow, except where retention is required by law.

6. Data Security

We implement security measures such as encrypted transport (HTTPS/TLS), provider-managed encryption at rest, access controls, and secure credential storage for passwords and API keys. For more details, see our Security page.

7. Your Rights

You have the right to:

• Access your personal data through the Dashboard
• Update your account information at any time
• Delete your account and associated data
• Export your data by contacting us

To exercise these rights, email hello@imagelayer.app.

8. Cookies

We use essential cookies for authentication and session management. We may also use privacy-oriented operational analytics that do not rely on advertising cookies. We do not use third-party advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact

If you have questions about this Privacy Policy, contact us at hello@imagelayer.app.