Privacy Policy

AI Magic (“we”, “us”, “our”) provides AI‑powered image transformation tools that let creators turn their photos into stylised, professional‑grade imagery. This Privacy Policy describes how we collect, use, store, and share information when you visit aimagic.app or any related product, application, or service (collectively, the “Service”).

By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

a. Information you provide directly

• Account information — your name, email address, and password (hashed) when you sign up. If you sign in with Google or another OAuth provider, we receive your basic profile details from that provider.
• Profile data — optional details such as your display name, avatar, role, and preferences.
• Uploaded content — the photos and reference images you upload to generate AI transformations.
• Generated content — the AI‑generated images produced for your account, along with the prompts and parameters used.
• Communications — messages you send us via email, contact forms, or support channels.

b. Information collected automatically

• Usage data — features used, templates accessed, generations created, timestamps, and approximate quotas consumed.
• Device & technical data — IP address, browser type and version, operating system, device identifiers, language, and timezone.
• Log data — diagnostic information such as error reports and request metadata, retained for security and reliability.

c. Information from third parties

• Payment processors — when you subscribe to a paid plan, our payment processor (e.g., Stripe) shares limited billing information with us (plan, status, last four digits of card). We never see or store your full card details.
• Authentication providers — basic profile information if you sign in with Google, LinkedIn, or other OAuth providers.

We use your information to:

• Provide, operate, and maintain the Service, including generating AI imagery from your inputs.
• Authenticate users, manage accounts, and enforce quotas tied to your plan.
• Process payments and manage subscriptions.
• Send service‑related communications (security alerts, billing notices, policy updates) and, with your consent, marketing emails — which you can unsubscribe from at any time.
• Analyse usage to improve performance, debug issues, and develop new features.
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We share data only with the trusted service providers that power AI Magic, and only to the extent needed to deliver the Service:

• Google (Gemini API) — uploaded images and prompts are sent to Google's Gemini API to produce generations. See Google's Privacy Policy .
• Supabase — our database, authentication, and storage provider hosts your account data and assets. See Supabase Privacy .
• Stripe — processes payments and subscription billing on our behalf. See Stripe Privacy .
• Analytics & monitoring — we may use privacy‑respecting analytics and error‑reporting tools to understand usage and improve reliability.
• Legal & safety — we may disclose information if required by law, regulation, court order, or to protect the rights, property, or safety of AI Magic, our users, or the public.
• Business transfers — if AI Magic is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may limit certain features (for example, persistent sign‑in).

We use three broad categories of cookies:

• Essential cookies — required for authentication, security, and core functionality.
• Functional cookies — remember your preferences, such as theme and locale.
• Analytics cookies — help us understand aggregate usage patterns.

We retain your information for as long as we need it to provide the Service and meet our legal obligations:

• Account data — retained while your account is active. You may delete your account at any time from your profile settings.
• Uploaded and generated images — retained while stored in your library; you can delete individual items or your entire account.
• Billing records — retained for the period required by applicable tax and accounting laws (typically 7 years).
• Logs and diagnostics — typically retained for up to 90 days, then aggregated or deleted.

When you delete your account, we delete or anonymise your personal information within 30 days, except where retention is required by law.

We implement industry‑standard administrative, technical, and physical safeguards to protect your information — including encryption in transit (TLS), encryption at rest, scoped access controls, and regular security review of our infrastructure.

No method of transmission or storage is 100% secure. If you suspect unauthorised access to your account, contact us immediately at hello@lokeshkapoor.com.

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to update inaccurate or incomplete data.
• Deletion — request deletion of your account and personal data.
• Portability — receive your data in a structured, machine‑readable format.
• Restriction & objection — limit how we process your data, or object to specific uses (such as direct marketing).
• Withdrawal of consent — withdraw consent you previously gave, without affecting prior processing.
• Complaint — lodge a complaint with your local data‑protection authority.

To exercise these rights, email us at hello@lokeshkapoor.com or use the controls in your account settings. We may need to verify your identity before fulfilling certain requests.

AI Magic is operated from India and uses cloud infrastructure that may store and process data in other countries. By using the Service you understand that your data may be transferred outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

AI Magic is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable minimum age). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date at the top of this page and, where appropriate, notify you by email or in‑app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions, requests, or feedback about this Privacy Policy? We're here to help.