Skip to main content
Back to Image Canvas
Legal · Privacy

Privacy Policy

This policy explains what information Image Canvas collects, why we use it, and the choices available to you.

Last updated: July 22, 2026

1. Who we are

Image Canvas is an AI image-generation and editing workspace. This Privacy Policy applies when you visit our website, create an account, purchase credits, or use our image-generation services.

2. Information we collect

  • Account information, such as your name, email address, profile image, authentication provider, and account identifiers.
  • Content you submit or create, including prompts, reference images, uploaded files, generated images, canvas projects, and related metadata.
  • Transaction information, such as the credit package, amount, currency, order status, and payment provider identifiers. Creem processes payment details; we do not receive your full card number.
  • Service and device information, such as request timestamps, feature usage, IP-derived security signals, browser information, error logs, and authentication records.
  • Messages you send to customer support.

3. How we use information

  • Provide, operate, secure, and improve Image Canvas.
  • Authenticate users, synchronize projects, process generation requests, and manage credits and orders.
  • Detect prohibited content, fraud, abuse, and violations of our Terms of Service.
  • Send transactional messages, including sign-in links, account notices, payment updates, and support replies.
  • Comply with legal obligations and enforce our agreements.

4. Prompt moderation and AI processing

Before an image-generation request is queued or sent to an AI model, the prompt is screened by Creem's Content Moderation API. Creem receives the prompt and pseudonymous internal user and session identifiers for policy enforcement and audit purposes. A prompt that is flagged or denied is blocked and is not sent to the image-generation model.

If moderation is unavailable or returns an invalid response, Image Canvas fails closed and temporarily blocks generation. Prompts, reference images, and generation settings that pass moderation are sent to the image infrastructure needed to produce the requested result.

5. How we share information

We do not sell your personal information. We share information only when needed to operate the service, complete a transaction, protect users, or comply with law.

  • Hosting, database, object-storage, email, authentication, and image-generation providers process data on our behalf.
  • Creem processes payments and prompt moderation under its own applicable terms and privacy practices.
  • Authorities or other parties may receive information when disclosure is legally required or necessary to protect rights, safety, and service integrity.
  • Information may be transferred as part of a merger, financing, acquisition, or sale of assets, subject to appropriate safeguards.

6. Cookies and local storage

We use cookies and browser storage that are necessary for sign-in, security, locale preferences, and application state. Blocking these technologies may prevent account and canvas features from working correctly.

7. Retention and security

We retain information for as long as needed to provide the service, maintain transaction and security records, resolve disputes, and satisfy legal obligations. Retention periods vary by data type and account status.

We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Keep your account links and API tokens confidential and contact us if you suspect unauthorized access.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also withdraw consent where processing relies on consent. Contact us to submit a request; we may need to verify your identity before completing it.

9. Children

Image Canvas is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect personal information from children below the applicable age. Contact us if you believe a child has provided personal information.

10. International processing

Our providers may process information in countries other than your own. Where required, we use appropriate measures intended to protect information transferred internationally.

11. Changes and contact

We may update this policy as the service or legal requirements change. We will post the revised version here and update the date above. For privacy questions, rights requests, or customer support, contact the email shown below.