Privacy Policy

1. Introduction

Welcome to IngenAd. We value your trust and are committed to protecting your privacy. This Privacy Policy describes what personal data we collect, how we use it, with whom we share it, how we protect it, and your rights regarding that data. By using our Platform, you accept the practices described herein.

2. Definitions

• User: person who accesses the Platform or uses our services.
• Account: profile created by the User to access the Platform.
• Personal Data: any information about an identified or identifiable natural person.
• Subscription: recurring payment plan that recharges credits according to tiers.
• Credits: digital units that the User uses to generate images.
• OAuth Provider: in our case, login through Google ("Google OAuth").
• Service: the generation of static advertisement images with AI accessible through the Platform.

3. Data We Collect

3.1 Data You Provide to Us

• When creating your Account: name, email address, password (stored securely).
• If you use Google OAuth: your Google account identifier, associated email address, public name and photo (according to permissions).
• Payment information: processed by our payment provider (Lemon Squeezy); we do not store full card numbers.
• Subscription or credit purchase data: date, amount, plan, transactions, variant ID, renewal and expiration dates.
• Content you create: Text prompts and descriptions you provide to generate advertisements.
• Images you upload: Reference images and product images you upload to generate or customize advertisements. These images are temporarily processed and may be stored in our secure cloud storage.

3.2 Data Generated by Your Use

• Generated advertisements: Images created by our AI system based on your prompts, including original generations and remixes (variations of existing ads).
• Generation metadata: Initial prompts, enhanced prompts used by the AI, AI model used (e.g., Google Gemini), aspect ratio, generation status, and timestamps.
• Credit usage history: Detailed transaction log of credit purchases, recharges, and expenditures, including descriptions and dates of each transaction.
• Remix history: Records of ad variations you create, including the original ad reference and modification prompts.
• Technical information: IP address, device type, operating system, browser, date and time of access, pages visited.
• Cookies and similar technologies: to identify your session, preferences and improve the functionality of the Platform.

4. Purposes of Processing

We use your Personal Data for the following purposes:

• Provide, operate, maintain and improve the Platform and AI generation services.
• Generate AI advertisements: Process your prompts and uploaded images through AI models (Google Gemini) to create customized advertising images.
• Store your content: Securely store generated advertisements, prompts, and uploaded images in our cloud storage to allow you to access, download, and remix them.
• Manage your account, subscription and credit purchases through our payment provider Lemon Squeezy.
• Track and manage your credit balance and transaction history.
• Authenticate you through Google OAuth to facilitate access.
• Send you administrative communications, billing, technical support and messages relevant to the service.
• Analyze and understand how you use the Platform to improve our offering.
• Comply with legal and security obligations.

5. Legal Basis for Processing

Where applicable, data will be processed based on:

• Your consent (for example, by accepting this policy and using associated services).
• The performance of a contract (for example, the provision of the Service).
• Compliance with legal obligations.
• Our legitimate interests (for example, maintaining security, usage analysis for product improvement).

6. Disclosure of Your Data

We may share your Personal Data with:

• Google (AI Services): We use Google's Gemini AI models to process your prompts and images to generate advertisements. Your content is sent to Google's servers for processing. Google's use of this data is governed by their own privacy policies and terms of service.
• Google (Authentication): To the extent you use Google OAuth to log in, we receive your Google account information to authenticate you. This data exchange is subject to Google's terms.
• Lemon Squeezy (Payment Processing): Our payment provider that processes subscription and credit purchase transactions. They receive payment information, email, and transaction details as necessary to process payments.
• Supabase (Cloud Infrastructure): Our database and cloud storage provider that hosts your account data, generated images, and application data. Supabase maintains SOC 2 Type II compliance and follows industry-standard security practices.
• Service providers: Other companies that help us with hosting, analytics, support, and email services.
• Authorities: If required by law or court order.

We do not sell your Personal Data to third parties for their own marketing purposes.

7. International Transfers

If we operate services from outside the User's country, your data may be transferred and stored on servers outside your jurisdiction. We ensure that there are adequate safeguards for security and legal compliance for such transfer.

8. Data Retention

We retain different types of data for varying periods:

• Account data: Retained for as long as your account is active and for a reasonable period after account closure to comply with legal obligations.
• Generated advertisements and prompts: Stored indefinitely while your account is active, allowing you to access your creation history. You can delete individual ads at any time.
• Uploaded reference/product images: Temporarily stored during the generation process and may be retained in storage. Images are associated with your generated ads.
• Credit and transaction history: Retained for as long as required by law for financial record-keeping (typically 7 years).
• Subscription data: Retained while you have an active subscription and for a period thereafter to comply with legal and tax obligations.

When data is no longer necessary for these purposes, we will delete or anonymize it in accordance with applicable laws.

9. Data Security

We implement reasonable technical and organizational measures to protect your data against loss, unauthorized access, disclosure, alteration or destruction. These measures include encryption where appropriate, access controls and periodic audits. However, no system is completely infallible.

10. AI-Generated Content and User Content

Our Platform uses artificial intelligence to generate advertising images. You should be aware of the following regarding AI-generated content:

• User-provided content: When you upload reference or product images, you represent that you have the right to use these images and that their use does not violate any third-party rights.
• AI processing: Your prompts and images are processed by Google's AI models. While we implement measures to protect your data, the AI processing occurs on third-party infrastructure.
• Generated content ownership: You retain rights to the prompts you create. The ownership and usage rights of AI-generated images are subject to our Terms of Service and applicable AI provider policies.
• Content storage: Generated advertisements and associated metadata are stored in our secure cloud infrastructure and accessible through your account.

11. Your Rights

Depending on your jurisdiction, you may have rights such as:

• Access: Request access to your personal data we hold.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, including generated advertisements and prompts.
• Portability: Request a copy of your data in a structured, commonly used format.
• Objection: Object to certain types of processing of your data.
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise your rights, contact us (see section 13). We may require identity verification before granting access. Please note that deleting your account will also delete your generated advertisements and associated data.

12. Use of Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

• Authentication: To maintain your login session and verify your identity.
• Preferences: To remember your settings and preferences.
• Analytics: To understand how you use the Platform and identify areas for improvement.
• Performance: To optimize the Platform's performance and user experience.

You can configure your browser to reject cookies or delete them, but this may affect certain functions of the Platform, such as staying logged in or accessing certain features.

13. Contact

If you have questions, comments or wish to exercise your rights regarding your data, write to us at:

Email: contact@ingenad.com

We will respond to your request within a reasonable timeframe as required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the new version with a "Last updated" date at the top and notify you if there are material changes. Your continued use of the Platform after the publication of changes constitutes your acceptance of those changes.