Privacy Policy

This Privacy Policy explains how Imagination Station Creations(“Imagination Station,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use imaginationstation.ai and our related services (the “Service”). We are based in New Brunswick, Canada, and handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, other privacy laws.

By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.

1. Information We Collect

Information you provide:

• Account information — such as your name, email address, and password (stored in hashed form). If you sign in through a third-party provider, we receive basic profile information from that provider.
• Payment information — processed by Stripe. We do not store your full card number. We receive limited billing details from Stripe (such as the card brand, last four digits, billing country, and subscription status) to manage your plan.
• Content you submit — reference images you upload, prompts and text you enter, and project data you save.

Information collected automatically:

• Usage data — actions in the app, features used, credits consumed, generation history, and timestamps.
• Device and log data — IP address, browser type, device information, and error logs.
• Cookies and similar technologies — used for authentication, session management, security, and basic analytics. See Section 7.

2. How We Use Your Information

We use personal information to:

• create and manage your account and authenticate you;
• provide the Service, including sending your prompts and reference images to our AI provider to generate Output, and storing your projects and generated designs;
• process payments, manage subscriptions and pay-as-you-go billing, grant and track credits, and prevent payment abuse;
• operate, secure, maintain, debug, and improve the Service;
• communicate with you about your account, transactions, security, and material changes;
• send product or marketing messages where permitted (you can opt out of marketing at any time); and
• comply with legal obligations and enforce our Terms.

Legal bases (where GDPR applies): performance of our contract with you (providing the Service and billing); our legitimate interests (securing and improving the Service, preventing abuse); your consent (marketing, non-essential cookies); and compliance with legal obligations.

3. AI Processing and Google

To generate designs, your prompts and any reference images you upload are transmitted to and processed by Googlethrough its Gemini generative-AI API. This processing happens on Google’s infrastructure, which may be located outside Canada, including in the United States. Google’s handling of this data is governed by Google’s applicable API and privacy terms. We send only what is needed to generate your Output.

4. How We Share Information

We do not sell your personal information. We share it only as follows:

• Service providers (subprocessors) who process data on our behalf under contract, listed in Section 5.
• Legal and safety — to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of our users, the public, or us.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your direction — for example, when you download and publish Output to a marketplace such as Etsy (that publication is governed by that marketplace’s terms, not this Policy).

5. Subprocessors

We rely on the following providers to run the Service. Several are located in the United States, so using the Service involves transferring personal information outside Canada.

6. International Data Transfers

We are based in Canada, but our providers process data in other countries, including the United States. When personal information is transferred outside your country, it may be subject to the laws of those countries, including lawful access by their authorities. Where required (for example, for users in the EU/UK), we rely on appropriate safeguards such as standard contractual clauses. By using the Service, you understand that your information will be processed as described here.

7. Cookies

We use cookies and similar technologies that are strictly necessary for authentication, session management, and security, and, where you consent, for analytics. You can control cookies through your browser settings; disabling strictly-necessary cookies may break sign-in and other core features.

8. Data Retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for as long as required to meet legal, tax, accounting, and dispute-resolution obligations. When information is no longer needed, we delete or anonymize it. Certain records (such as billing records) may be retained longer to comply with law.

9. Your Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your information (subject to legal retention requirements);
• withdraw consent (for example, to marketing) at any time;
• object to or restrict certain processing; and
• portability — receive certain information in a portable format.

California residents (CCPA/CPRA):you have rights to know, delete, and correct personal information, and to opt out of “sale” or “sharing” — we do not sell or share personal information as those terms are defined. We will not discriminate against you for exercising your rights.

To exercise any right, contact us at imaginationstation.support@gmail.com. We will verify your identity and respond within the timeframe required by law. You may also close your account, which begins deletion of your data subject to the retention rules above.

If you are in Canada and have an unresolved concern, you may contact the Office of the Privacy Commissioner of Canada. If you are in the EU/UK, you may contact your local data-protection authority.

10. Security

We use technical and organizational measures to protect personal information, including encryption in transit, hashed passwords, access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Notify us promptly at imaginationstation.support@gmail.com if you believe your account has been compromised.

11. Children’s Privacy

The Service is not directed to children. You must be at least 18, or the age of majority in your jurisdiction, to use it. We do not knowingly collect personal information from children. If we learn we have, we will delete it.

12. Changes to This Policy

We may update this Policy. We will post the updated version with a new “Last updated” date and, for material changes, provide reasonable notice. Continuing to use the Service after changes take effect means you accept the updated Policy.

13. Contact Us

For privacy questions or to exercise your rights:

Imagination Station Creations
Quispamsis, New Brunswick, Canada
imaginationstation.support@gmail.com