Privacy Policy of maginary.ai

maginary.ai operates the www.maginary.ai website, app.maginary.ai and its other subdomains, which provides the SERVICE.

This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, the maginary.ai website.

If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at www.maginary.ai, unless otherwise defined in this Privacy Policy.

Information Collection and Use

For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to your name, phone number, and postal address. The information that we collect will be used to contact or identify you.

Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar law applies to you, we process your personal information under the following legal bases:

  • Performance of a contract — providing and operating the Service you signed up for (account, generations, billing).
  • Legitimate interests — securing our systems, preventing fraud and abuse, defending legal claims (including payment disputes), and improving the Service. We balance these against your rights and interests.
  • Consent — non-essential cookies and analytics, where you have explicitly opted in via our cookie banner. You may withdraw consent at any time by clearing your cookies or changing your browser settings.
  • Legal obligation — retaining billing and tax records as required by applicable law.

Log Data

We want to inform you that whenever you visit our Service, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

Cookies

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive.

Our website uses these "cookies" to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.

Service Providers and Sub-Processors

We share personal information with the following third-party companies to operate the Service. Each processor receives only the data necessary to fulfill its role and is bound by appropriate data-processing agreements or their own published terms.

Provider Purpose Data shared Privacy policy
Stripe Payment processing and subscription billing Name, email, billing address, payment card data stripe.com/privacy
Amazon Web Services (AWS S3) Cloud storage for generated images and assets Generated image files (no PII beyond content of uploaded reference images) aws.amazon.com/privacy
Cloudflare CDN, DDoS protection, and DNS IP addresses, request metadata (in transit) cloudflare.com/privacypolicy
Replicate AI image and video generation Text prompts, reference images submitted by the user replicate.com/privacy
OpenAI AI model inference (image generation and enhancement) Text prompts, reference images submitted by the user openai.com/policies/privacy-policy
fal.ai AI model inference (image generation) Text prompts, reference images submitted by the user fal.ai/privacy
Google Analytics Usage analytics and performance measurement Anonymized usage data, IP address (truncated) — only with your consent policies.google.com/privacy
Google Ads / Twitter (X) Advertising conversion tracking Conversion events, cookies — only with your consent policies.google.com/privacy / twitter.com/privacy

Consent-gated processors (Google Analytics, Google Ads, Twitter/X) receive data only after you have accepted cookies via our cookie banner. You can withdraw consent at any time by clearing your cookies or adjusting your browser settings.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

International Data Transfers

Our Services are hosted in the United States. If you access the Services from the European Economic Area, the United Kingdom, or another jurisdiction with data-protection laws that differ from those in the United States, please be aware that your personal information will be transferred to and processed in the United States.

Where required, we rely on approved transfer mechanisms — including Standard Contractual Clauses (SCCs) with our processors and, where applicable, the EU–US Data Privacy Framework — to safeguard these transfers.

Your Rights

Depending on where you live, you may have the following rights over your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Rectification — ask us to correct information that is inaccurate or incomplete.
  • Erasure — ask us to delete your personal information (subject to the retention exceptions described in the Account Deletion section below).
  • Restriction — ask us to limit how we process your personal information.
  • Portability — receive the information you provided to us in a portable, machine-readable format.
  • Objection — object to processing based on legitimate interests, including for direct marketing.
  • Withdraw consent — where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us using the details in the Contact Us section below. We may need to verify your identity before acting on a request. If you believe we have not handled your information properly, you also have the right to lodge a complaint with your local data-protection supervisory authority.

Children's Privacy

Our Services are not directed at children under the age of 16 (or the age of digital consent in your jurisdiction, which may be as low as 13 in some countries). We do not knowingly collect personal information from children below that age. If we become aware that a child below the applicable age has provided us with personal information, we will delete it from our servers as soon as possible. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Account Deletion and Data Retention

You may delete your account at any time from your account dashboard at https://app.maginary.ai/dashboard. When you delete your account, any active subscription is canceled at the end of the current billing period so no further charges will occur, and you will no longer be able to log in.

We retain your account records after deletion for legal, tax, billing, and dispute-resolution purposes. As a result, the email address associated with a deleted account cannot be reused to create a new account.

If you would prefer that we permanently delete all records associated with your account — including information we would otherwise retain — please contact us using the details in the Contact Us section below. We will honor such requests to the extent required by applicable law. Certain records may still be retained where we are legally obligated to do so (for example, billing and tax records, or evidence relating to an active fraud investigation or payment dispute). Where identity verification is necessary before honoring a request, we will contact you to arrange it.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at contact@explode9.com.