Privacy policy
How Imaglow collects, uses, shares and deletes account data, Google sign-in information and creative content.
Imaglow is in preview. Real generation and payments are not yet available.
Imaglow privacy and service policies for https://getimaglow.com.
Last updated: October 27, 2026
About this privacy policy
This privacy policy applies to Imaglow at https://getimaglow.com. It explains how Imaglow handles information obtained through Google sign-in and information you provide when using the website. You can read this policy and our homepage without an account. For privacy questions or access and deletion requests, use the support email at the end of this page.
Google API Services User Data Policy
Imaglow’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only for the account and authentication purposes described here. It is not used for advertising, sold to data brokers or shared with the image provider, and it is not used to train or improve generalized AI or machine learning models.
Google sign-in and your data
Imaglow requests only your Google account identifier, name, email address, email verification status and optional profile picture through openid, email and profile permissions. We use these details to create your Imaglow account, authenticate you, prevent duplicate trial grants and provide account support. We do not request access to Gmail, Google Drive, contacts or Google Photos. Google account data is not sent to our image generation provider or used to train AI models. We do not sell this data or use it for advertising.
Optional Photopea editor
Basic edits run in your browser. If you explicitly open the Photopea advanced editor, the current image is transferred to the official embedded Photopea app on your device. We do not send it your Imaglow account details, authentication cookies or private image URLs. Photopea states that ordinary image editing is performed on your device. Its own terms, advertisements and privacy policy apply; optional third-party tools inside Photopea may have separate terms. Returning an image to Imaglow imports a flattened PNG into the current browser session, without automatically uploading it or spending credits. Save a PSD in Photopea to retain layers.
Information we process
We receive your name, email and optional profile image from Google when you sign in. We store session information, account balances, prompts, reference images, generated images, task records and transaction identifiers needed to provide the service. Payment card details are handled by Lemon Squeezy and its processors, not stored by Imaglow.
Why and where it is processed
We use this information to sign you in, create and deliver images, maintain accurate billing, prevent abuse and support your account. Prompts and references are sent to our configured third-party image provider. Hosting, storage, authentication and payment providers process information on our behalf. Processing may occur outside your country.
Storage and security
Creations are private by default. Reference images are deleted within 24 hours; generated images are removed after 30 days. We retain account and financial records as necessary for service delivery, dispute handling and legal obligations. Database backups rotate over seven days and are restricted to authorized operators.
Community submission data
If you choose to submit a work, we store the image, title, prompt, chosen public author name, permission confirmation and review records to manage the submission. Only approved submissions are publicly visible; your email and private generation history stay private. Drafts expire after 24 hours and pending submissions after 30 days. Published images remain until you withdraw them or a reviewer removes them. Withdrawal hides the work immediately; rejected or withdrawn image files are removed within 24 hours, with delayed cleanup resuming after a worker outage. Submission details and review records may remain for moderation and dispute handling; restricted database backups rotate over seven days. These rules do not change the retention of account or financial records.
Cookies and analytics
Essential session cookies keep you signed in. We record basic first-party events such as page views, generation outcomes and checkout starts to understand service use. Imaglow does not place advertising cookies. If you choose the optional Photopea advanced editor, its embedded service may show ads and use its own cookies under its policy. Do not include sensitive personal information in your prompts.
Retention of Google account information
We keep the Google account identifier, name, email, verification status and optional profile picture while your Imaglow account remains active so that you can sign in and manage your account. You can request account deletion using the support email below. Following an ownership check, we delete the account profile, Google association and sessions, except information required for legal obligations or disputes. Deleted records leave restricted backups through the seven-day backup rotation. Revoking Google access stops future authorization but does not automatically delete previously stored account records.
Your choices
You may ask support to access, correct or delete account information. Some records may need to be retained for legal or dispute purposes. Signing out removes your active session. Please download images before their retention period ends.
Access, deletion and revoking Google access
To request access, correction or deletion, contact the support email shown below from your account email. We may verify ownership before acting. Deletion requests cover your account profile, Google account association, sessions and private content, except records that must be kept for legal obligations or disputes. Deleted records may remain in restricted database backups until the seven-day backup rotation completes. You can separately revoke Imaglow access in your Google Account third-party connections settings; revocation does not itself delete records already held by Imaglow. We restrict production access to authorized operators and use HTTPS for data in transit.
Service providers and international processing
Our current infrastructure uses Alibaba Cloud hosting in Singapore and Cloudflare for network delivery and private R2 storage. Google provides sign-in. If image generation is enabled, only the prompt and optional reference image needed for that request are shared with the configured image provider; your Google credentials are not shared with it. If checkout is enabled, Lemon Squeezy and its payment processors handle payment information. These providers may process data in other countries. Generation and payment are currently disabled during preview. Contact support before submitting information if you need details about the active image provider.
Operated by Vicky · Imaglow
Support: [email protected]