Privacy Policy

1. Introduction

Image Farm (the "Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our AI-powered advertisement image generation platform (the "Service"). It also describes your rights and choices regarding your information, and how you can contact us about our privacy practices. We operate from Dubai, United Arab Emirates and in Australia, but our Service is available to users globally. We strive to comply with applicable privacy laws in the regions we operate, including the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where applicable. By using the Service, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Service. This Privacy Policy is incorporated into and is subject to our Terms and Conditions.

2. Information We Collect

We minimize the personal data we collect from you, and we only collect what is necessary to provide and improve our Service. The types of information we may collect include:

Account Information: When you register for an account, we collect your email address and a password. We may also collect your name or company name if you choose to provide it, and any contact information you provide (such as a profile name or phone number, if applicable). This information is used to create and maintain your account, authenticate you, and communicate with you about the Service.

Payment Information: If you subscribe to a paid plan, you will provide payment details. Payments are handled through a secure third-party payment processor (for example, Stripe, PayPal, or others). We do not store your full credit card numbers or financial account numbers on our systems. We may retain non-sensitive payment details related to your subscription (such as billing name, billing address, the cardholder name, card brand, expiration date, and the last four digits of your card number) as provided by the payment processor, as well as records of your transactions (date, amount, etc.) for billing and financial record-keeping.

User Content: When you use our Service, you can upload photos of your products or other images. These images, and any related data you submit (such as descriptions or settings for generating the ad images), are collected and processed by the Service to generate the advertisement creatives. We treat these images as your content: we do not use them for any purpose other than providing the Service to you (which may include transient processing through our AI models and storing the resulting generated images for your use). The uploaded photos and generated images may be temporarily stored on our servers to facilitate the Service (for example, to allow you to download your results or revisit your past generated images), but they are not used by us to profile you, and we do not use them to train our AI models without your explicit permission.

Automatically Collected Data (Usage Data): Like most online services, we automatically collect certain information about your device and how you interact with the Service. This may include:

• Device and Log Information: When you use the Service, our servers automatically record information ("log data"), including information that your browser or device sends whenever you connect. This log data may include your Internet Protocol (IP) address, browser type, device type, operating system, referring URLs, pages viewed, date and time of access, and other usage statistics. We use this information to ensure the Service is delivered properly, to monitor for security issues, and to analyze usage of our Service (in an aggregated, non-identifying manner) so we can improve performance.
• Cookies and Similar Technologies: We use essential cookies and similar technologies to provide the Service (such as keeping you logged in and remembering your preferences). We do not use tracking cookies for advertising purposes. You can set your browser to refuse non-essential cookies; however, some features of the Service may require cookies to function properly.

We do not knowingly collect sensitive personal information (such as government ID numbers, racial or ethnic origin, biometric data, health information, etc.) from users, and we ask that you not provide this type of information using our Service.

3. How We Use Your Information

We use the collected information for the following purposes:

• To Provide and Maintain the Service: We use your information to create your account, allow you to log in, process the images you upload, generate the ad creatives, and deliver those results back to you. For example, your email and password are used for authentication, and your product photos are used by our AI system to generate new images.
• To Process Payments: We use payment-related information to manage subscriptions, process charges, send invoices or receipts, and resolve billing issues. (Note: actual payment transactions are handled by our third-party payment processor, but we coordinate with them to ensure your subscription is active upon successful payment.)
• To Communicate with You: We may use your email address (and/or other contact info, if provided) to send you service-related communications, such as account verification, subscription confirmations, billing receipts, technical notices, security alerts, and support responses. We may also send you occasional product updates, tips on using the Service, or promotional offers for our Service. You can opt out of marketing or promotional emails at any time by clicking the unsubscribe link in those emails. (Transactional or essential emails, such as billing receipts or password resets, cannot be opted out of, as they are necessary for providing the Service.)
• To Enforce our Terms and Policies: We may use your information to monitor for fraudulent activities or abuse of our Service, to investigate violations of our Terms and Conditions, and to enforce our rights arising from any contracts entered into between you and us (including billing and collection).
• To Improve and Develop the Service: We may analyze aggregated usage patterns and feedback to improve our AI models, add new features, enhance user experience, and optimize performance. For example, we might track how often certain features are used or how quickly users move through a workflow to identify areas for improvement. However, in doing so, we typically use de-identified or aggregated data. Any use of your uploaded images for improving our models would be in accordance with our Terms and (if applicable) obtained with your consent or anonymized in a way that it cannot be linked back to you.
• To Comply with Legal Obligations: We may process and retain your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For example, we keep transaction records to comply with financial regulations and tax laws, and we may preserve data if required by law enforcement or a court order.

4. How We Share Your Information

We understand the importance of keeping your personal information private. We do not sell your personal information to third parties. We only share your information in the following limited circumstances:

With Service Providers: We share information with trusted third-party service providers who perform services on our behalf to help us operate and support the Service. This includes:

• Payment Processors: As mentioned, any payment information you provide is handled by third-party payment processors (e.g., Stripe, PayPal). These processors have access to payment-related personal data for the purpose of processing transactions and subscriptions. They are obligated to protect your information under their privacy policies and applicable laws.
• Cloud Storage and Hosting: We may use cloud infrastructure providers and hosting services to store data and run our application. For example, user account information, images, and generated content might be stored on secure servers provided by reputable cloud platforms. These providers may technically have access to data for storage/processing purposes, but they are not allowed to use it for anything other than providing services to us.
• AI Processing Partners: Our platform uses third-party AI engines (such as Google's AI or OpenAI's models) to perform the image generation. This means that your uploaded images and any prompts may be securely transmitted to these AI services to compute the Generated Content. These third-party AI providers are under agreements that restrict how they can use the data (generally, they process it only to provide the output and do not use it to train their models without permission, in accordance with their own terms and privacy commitments). We only partner with reputable AI providers that have privacy and security standards we consider adequate.
• Email and Communication Tools: We might use email service providers or customer support platforms (for example, services like SendGrid for sending emails or Zendesk for support tickets) to communicate with you.

All these service providers are bound by contractual obligations to keep personal information confidential and to use it only for the purposes of providing their specific services to us.

With Affiliates: We may share your information with our affiliated companies (for example, if we have a parent company, subsidiaries, or common ownership). Any such entity will honor the commitments made in this Privacy Policy.

For Legal Reasons: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: (i) comply with a legal obligation, judicial proceeding, or governmental request (e.g., in response to a court order or subpoena); (ii) enforce our Terms and other agreements; (iii) detect, prevent, or address fraud, security, or technical issues; or (iv) protect the rights, property, or safety of the Company, our users, or the public. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Business Transfers: If the Company is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of the Service to another provider, your information may be transferred as part of such a transaction. We will ensure that any such transfer is subject to appropriate confidentiality and security measures, and we will provide notice before your personal information becomes subject to a different privacy policy.

With Your Consent: In cases where we want to share your information for purposes not covered by this Privacy Policy, we will ask for your consent. For example, if we ever wanted to use a customer's images or generated content in our marketing materials or case studies, we would only do so with explicit permission from the owner of that content.

5. International Data Transfers

Our Service is global, and the personal information we collect may be transferred to and stored on servers in countries different from your own, including the United Arab Emirates, Australia, the United States, or other locations where our service providers operate. While data protection laws vary by jurisdiction, we take steps to ensure that your data is handled securely and in accordance with this Privacy Policy wherever it is processed. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we will implement appropriate safeguards to protect your personal data when it is transferred outside of those regions. These safeguards may include Standard Contractual Clauses approved by the European Commission or other lawful mechanisms for data transfer. By using the Service or providing us with information, you understand that your personal data may be transferred to countries which may have different data protection rules than your country, but we will take appropriate measures to ensure an adequate level of protection for your information.

6. Data Security

We employ a variety of security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Using HTTPS encryption (TLS/SSL) for all data transmissions between your browser/app and our servers, which helps prevent eavesdropping on data in transit.
• Storing passwords in a hashed (and salted) format, meaning we do not store your plain-text password.
• Limiting access to personal data to employees and contractors who need to know that information in order to operate, develop, or improve our Service, and who are bound by confidentiality obligations.
• Regularly updating our security practices and employing industry-standard protections such as firewalls, intrusion detection systems, and secure data backup routines.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security of your information. You also play a role in protecting your information by keeping your account credentials secure and by notifying us promptly if you suspect any unauthorized access to your account.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements.

Account Data: We will keep your account information (like your email and profile information) for as long as your account is active. If you close your account or it is terminated, we will delete or anonymize your personal information within a reasonable period after the closure, except as noted below.

User Content: Uploaded product photos and generated images may be stored on our servers to enable your use of the Service (for example, to allow you to re-download past generated images or continue a project). If you delete specific images or content from the Service (where such functionality is available), we will remove those from active databases, though they might persist in backups for a short period. If you delete your account, we will delete or anonymize User Content associated with your account as part of the account deletion process, within a reasonable time after receiving your deletion request, barring any legal obligation to retain it.

Transaction Records: We will retain transactional information (such as invoices, payment records, and correspondence regarding payments) for as long as needed for financial reporting and compliance with laws (for example, tax and accounting regulations may require us to keep records of payments for a certain number of years).

Communications: If you contacted us for support or other inquiries, we may retain those communications for a short period to ensure we have context for any follow-up or to improve our support processes, unless you request deletion.

Legal Obligations: We may retain data for longer periods if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements. For example, we might retain certain information if required by law or if there is an outstanding issue, claim, or dispute requiring us to keep the information.

When we have no ongoing legitimate business need or legal requirement to process your personal information, we will either delete it or anonymize it (so that it can no longer be associated with you). If deletion or anonymization is not immediately possible (for example, because your personal information has been stored in backup archives), we will securely store your information and isolate it from any further processing until deletion is feasible.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to honoring applicable data protection rights. These rights may include:

• Access and Correction: You have the right to request access to the personal information we hold about you and to request corrections of any inaccuracies. You can review and update most of your account information directly by logging into your account settings. If you need additional assistance or would like to request a copy of your personal data, please contact us.
• Deletion (Right to Erasure): You can request that we delete the personal information we hold about you. For example, you can delete your account via your account settings which will remove your personal information from the Service (subject to retention noted in Section 7). You may also contact us to request deletion of specific data. We will honor deletion requests to the extent required by applicable law. Note that we may need to retain certain information for legal or internal business purposes (as described in Data Retention), and some residual data may remain in backups for a short period.
• Data Portability: If you are in a jurisdiction such as the EU that provides this right, you may request a copy of personal data you have provided to us in a common machine-readable format so you can transfer it to another service (to the extent this is technically feasible).
• Withdrawal of Consent: If we have collected or are using any of your personal information based on your consent, you have the right to withdraw that consent at any time. For instance, if you have subscribed to a marketing newsletter, you can opt out. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it may not affect processing that is permitted by other legal bases.
• Objection and Restriction: You have the right to object to or request that we restrict certain processing of your personal information in certain circumstances. For example, if you believe our processing is based on legitimate interests, you may object to that processing and we will consider your request. You can also opt out of certain use of cookies through your browser settings.
• California Privacy Rights: If you are a California resident, you have specific rights under the CCPA, including the right to know what personal information we collect, use, and disclose about you, the right to request that we delete your personal information, and the right to opt out of the "sale" of your personal information (note: we do not sell personal data, as stated above). California users also have the right not to receive discriminatory treatment for exercising their privacy rights. To exercise your California privacy rights, you or your authorized agent may contact us as described in the "Contact Us" section below.
• EU/EEA Privacy Rights: If you are in the European Union/EEA, you also have the right to lodge a complaint with a supervisory authority (data protection authority) in your country if you believe that we have infringed your data protection rights. However, we encourage you to first reach out to us so we can try to address your concerns directly.

To exercise any of your rights, please contact us at the email or mailing address provided in the "Contact Us" section of this Privacy Policy. We may need to verify your identity (for example, by asking you to confirm some information or log in to your account) before fulfilling certain requests, to ensure that your personal information is not disclosed to someone impersonating you.

9. Children's Privacy

Our Service is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use or provide any information to us on the Service. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as possible. For minors aged 13 to 17 (or the age of majority in your jurisdiction if higher), the Service should only be used with the involvement and consent of a parent or guardian, and the account should be registered by the parent or guardian. Since our Service involves payments and is primarily targeted to businesses and adults, we expect users to be adults or have obtained parental consent. If you are a parent or guardian and you believe we have collected personal information from your child without consent, please contact us, and we will work to delete that information.

10. Third-Party Websites or Services

Our Service may contain links to third-party websites, services, or integrations (for example, a link to our social media page, or integration with a third-party AI service as part of our platform). This Privacy Policy does not apply to information collected by third-party websites or services that are not operated by us. We are not responsible for the practices of such third parties. We encourage you to review the privacy policies of any third-party services you interact with.

11. Changes to this Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes to this Policy, we will notify you by posting the updated Policy on our website and updating the effective date at the top, and/or by providing a more direct notification (such as an email notice) if required by law. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated terms.