Privacy Policy
Last updated October 31, 2026
Introduction
Welcome to imageat AI, a service operated by INFINITE PHASE LLC. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.
Information We Collect
We collect and process the following information:
- Account information (email, username) when you create an account
- Photos, images, and videos you upload to use our AI services
- Usage data and analytics to improve our service
- Payment information processed securely through third-party payment processors (Stripe)
- Device and browser information for security and optimization
- Credit purchase and subscription information
How We Use Your Information
We use your information to:
- Process your photos and videos using our AI technology
- Provide and maintain our service
- Process payments and manage your account and credits
- Send you important service updates and notifications
- Improve the service and user experience using usage and performance data
- Detect and prevent fraud and abuse
- Screen prompts and uploaded images for content our Terms of Service prohibit, including sexually explicit material. This screening is automated and is also performed by the AI providers that process your request. Where an account shows a pattern of violations, we may review its generation history to enforce our Terms
- Manage subscriptions and credit allocations
Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal data. Uploaded media may be sent to third-party AI and storage providers to process your request. Generated results, media URLs, prompts, and transaction records may remain in your account history until you delete them or request account deletion, subject to operational and legal retention requirements. Provider copies are subject to those providers' retention practices. We use security measures to protect data in transit and at rest. Stripe handles payment card details; we retain payment and subscription identifiers and transaction records needed to operate the service. If you delete an account that has billing history, we keep a limited billing record (your email, payment and subscription identifiers, purchase and credit-usage history, and the time and IP address of the deletion request) for up to 18 months to handle refunds, payment disputes, and fraud prevention, and then delete it. Your uploads, generated media, and prompts are not part of this record.
Payments (Stripe)
Payments are processed by Stripe. Card numbers and other payment details you enter at checkout are collected directly by Stripe; we never receive or store your full card number. From Stripe we receive what we need to run your account: your name and email, billing country and postal code, card brand, last four digits and expiry, and the status of each payment and subscription.
- Stripe also uses payment and device data for its own purposes, such as fraud prevention and meeting its legal obligations, as described in the Stripe Privacy Policy.
- If you choose to save your payment details with Link, Stripe's saved-payment service, Link is provided by Stripe under its own terms and privacy policy.
- If you dispute a payment, we share the relevant transaction, account and usage records with Stripe and your card issuer so the dispute can be resolved.
International Data Transfers
INFINITE PHASE LLC is based in the United States, and we and our service providers, including Stripe and our AI and storage providers, process and store data in the United States and other countries. Your personal data may therefore be transferred to, stored in, and accessed from countries other than your own, where it may be subject to disclosure to courts, law enforcement and other authorities under the laws of those countries. We rely on our providers' contractual safeguards for these transfers.
Third-Party Services
We use trusted third-party services to provide our functionality:
- Authentication services (Firebase Authentication)
- Payment processing (Stripe)
- Cloud storage and AI processing providers, including providers that host uploaded or generated media
- Analytics and performance services used on the site
These services have their own privacy policies and we recommend reviewing them.
AI Assistants and Connected Apps (ChatGPT, Claude, MCP)
You can connect imageat to AI assistants such as ChatGPT and Claude through our Model Context Protocol (MCP) server at mcp.imageat.com. When you connect, you sign in to imageat and approve the connection, and we create an API key for it that appears on your Projects page.
- What we receive: only the inputs the assistant sends when you ask it to use imageat: your prompt and settings, and any images you attach or link for that request. We do not receive your conversation history, your memory or files at the assistant provider, or your account details there.
- How we use it: to run the generation or edit you asked for, charge the credits it costs to your imageat account, save the result to your imageat history, and screen prompts for content our Terms prohibit. Requests from the imageat ChatGPT app always use our strictest content filter.
- Who receives it: the AI model and storage providers that process the request, as for any imageat generation, and the assistant you connected, which receives the result links and handles them under its own privacy policy.
- Retention: results and prompts stay in your account history like any other generation. Connection access tokens expire after one hour and refresh tokens after 30 days; the connection's API key remains until you revoke it.
- Your controls: disconnect imageat in the assistant's settings, revoke the connection's key on your Projects page, delete generations from your history, or delete your account.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
- Withdraw consent at any time
- Cancel your subscription at any time
Cookies and Tracking
We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: [email protected]
Mailing address: INFINITE PHASE LLC, 8 The Green, Suite A, Dover, DE 19901 USA
Questions about this policy?
Email us and we'll get back to you.
Connected Social Accounts (Social Hub)
Social Hub lets you connect Facebook Pages, Instagram professional accounts, LinkedIn, X, TikTok and YouTube so you can publish and schedule your own imageat content. You connect each account yourself through the platform's official login and approve the permissions it asks for.
Data deletion instructions
To delete the data Social Hub holds from a connected account, open Social Hub → Integrations and disconnect the account; its tokens are deleted immediately. To delete all of your imageat data, including every connected account, post and schedule, use Delete account on your Dashboard, or email [email protected] from your account's address and we will delete it within 30 days.