Privacy Policy

Last updated: 2026/10/15

What personal data ImgVid collects, why, and how it is handled — including the images you upload and the AI providers that process them

What this policy covers

This Privacy Policy explains what personal data ImgVid collects, why, and how it's handled when you use ImgVid, an AI image and video generation service at imgvid.net.

ImgVid is operated by a company registered in England and Wales, and is the "controller" of your personal data. That means ImgVid decides what data is collected and why, and is responsible for looking after it under the UK GDPR and the Data Protection Act 2018.

Information ImgVid collects

Account information. When you sign in with Google, ImgVid receives your name and email address, and creates an account identifier for you.

Uploaded inputs. You can upload images for image or video generation. Some configured modes also accept audio or video references. These images may show identifiable people, including you, friends, family, or pets. This is the most sensitive information ImgVid handles, and you are responsible for having the right to upload any image you submit — including the consent of any identifiable person shown in it.

Generated outputs. ImgVid creates and stores images and videos generated from your prompts and any reference inputs.

Your asset library. Images you upload are also saved to your private asset library so you can reuse them in later generations. Only you can see your library.

Prompts you ask ImgVid to improve. If you use "Improve prompt with AI", the text in the prompt box is sent to an AI model to be rewritten. ImgVid does not keep a copy of that text or of the rewritten prompt beyond returning it to you.

Things you choose to make public. If you share a video on Explore or submit a review, ImgVid stores what you chose to share and the result of our review (see "Public sharing on Explore" and "Reviews" below).

Usage and technical data. Like most web services, ImgVid's servers log information such as your IP address, browser and device information, and pages you visit.

Billing records. ImgVid keeps a record of your purchases and credit balance. Full card numbers are handled directly by our payment processors and are not stored by ImgVid.

Why ImgVid processes your data

ImgVid processes your data on these legal bases:

To perform our contract with you — creating your account, generating images or videos from your prompts and inputs, and managing your credits and subscription.
For ImgVid's legitimate interests — keeping the service secure, preventing abuse, and understanding usage through server logs.
With your consent — for optional communications, such as a newsletter you choose to sign up for, and for anything you choose to make public: videos you share on Explore and reviews you submit. You can withdraw that consent as described below.

Your generation inputs are sent to AI model providers

To generate an image or video, the prompt and any required image, audio or video reference inputs are transmitted to third-party AI model providers, who perform the actual generation. This is a core part of how ImgVid works — ImgVid does not run these models itself. Only what is needed for the selected generation is sent. Content safety processing is described separately below.

Content safety checks and reports

What we check and why

ImgVid checks prompts, image, audio and video references, and generated results against our content standards. Necessary material is sent to third-party content safety services to prevent abuse and enforce our service contract. Requests that fail these checks are blocked before generation; results that fail checks are withheld from delivery. If a check cannot be completed, the request or result is not treated as approved. These checks do not publish your private content on Explore.

Content standards

Prohibited content includes adult pornography, sexual exploitation of minors, non-consensual intimate content, graphic violence, hateful or harassing content, assistance with self-harm, fraud and other malicious activity. See our Terms of Service for the full standards and their context. Safety checks can make mistakes and do not guarantee detection of every violation.

Records and provider processing

We keep limited records of safety decisions, provider request identifiers, content fingerprints, timing and usage for safety, reliability, abuse prevention and necessary legal obligations. A fingerprint is not a copy of your prompt or media. Deleting a file or account does not immediately erase all necessary safety records or reset abuse-prevention limits.

Safety providers process and retain submitted material under their own data-handling arrangements. Where supported, we request deletion of temporary processing copies and follow up on unconfirmed deletions. Removing your local file or withdrawing access does not itself delete a provider's stored copy. We cannot guarantee that all provider copies or logs are deleted immediately.

Reports, review and your rights

You can report suspected violations or ask our team to review a safety decision you believe is mistaken. We process the information you provide to assess and respond to the request. Contact us for a report, review request, questions about this processing or to exercise your data rights.

Who ImgVid shares data with

ImgVid uses the following categories of service providers to operate:

Cloudflare — for hosting, our database, file storage of your uploads, asset library and generated images and videos, in some cases sending transactional email, and the optional "Improve prompt with AI" feature, which rewrites your prompt using Cloudflare Workers AI.
AI model providers — to generate images or videos from the selected inputs.
Content safety providers — to check the necessary prompts, reference inputs and generated results against our content standards, as described above.
Payment processors (such as Stripe or Creem) — to process your purchases. They receive your payment details directly; ImgVid does not store full card numbers.
Resend — to send transactional emails, such as account or billing notices. If you opt into a newsletter, Resend or Beehiiv may also be used to send it.
Google — to authenticate your sign-in.

ImgVid does not sell your personal data, and does not share your uploaded images or generated images and videos with advertisers or data brokers.

Your videos are private by default. A video only becomes public if you choose to share it — either by turning on "Share to Explore" before you generate, or by pressing "Share to Explore" on a finished video.

Every shared video is reviewed by our team first. It only appears on Explore after it is approved. We may decline any video, for example if it shows a person who may not have agreed to it, a minor, or explicit content.
What becomes public: the video itself, plus your prompt and a nickname only if you chose to show them. Your name, email address and account details are never shown.
Anyone can watch and save it while it is public. A shared video is public: any visitor to Explore can watch it, and their browser or other tools can save a copy of it.
Withdrawing: you can withdraw a shared video at any time. It is removed from Explore immediately; copies already cached by browsers or our content delivery network may take up to 5 minutes to disappear. Withdrawing cannot recall copies that visitors saved while the video was public.
How long it stays: a shared video is kept as a separate public copy until you withdraw it, we decline or remove it, or you delete your account. It is not affected by the automatic removal of generated assets described below.

Reviews

After a successful generation, ImgVid may invite you once to leave a review. If you submit one, it is reviewed by our team before it appears on the website. Only the rating, the text you wrote, and the name and role you chose to enter (if any) are shown — never your email address or profile photo. To have a published review removed, contact us. Reviews are deleted when you delete your account.

Sending data outside the UK

Some of these providers process data outside the UK, including in the United States. When personal data leaves the UK, ImgVid relies on one of the transfer mechanisms UK data protection law allows: either the country has been judged by the UK government to offer adequate protection, or the transfer is covered by the UK's International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), together with checks appropriate to the transfer.

If you would like more detail about the safeguards used for a particular provider, contact us.

How long ImgVid keeps your data

ImgVid keeps your account, uploads, and generated images and videos for as long as your account is active and as needed to provide the service. Uploaded and generated assets are removed automatically once they are no longer needed for the service to function.

Asset library. An image in your asset library is deleted automatically 90 days after you last used it, when you delete it yourself, or when your library goes over 200 images (the image you used least recently is removed first).

Shared videos and reviews. Videos you shared on Explore are kept until you withdraw them, we decline or remove them, or you delete your account. Reviews are kept until they are removed at your request or you delete your account.

Reward fairness records. If you take part in the daily or invitation reward programme, we keep limited records needed to apply its eligibility and anti-abuse rules. These can include purpose-separated irreversible keyed hashes derived from your email address, network address, or a random browser identifier; the reward decision and reason; and anonymous invitation-graph nodes used to prevent invitation loops. We do not store the raw email address, network address, or device characteristics in these reward records. Most signals expire within 90 days. Short-lived invitee network and repeated-attempt signals expire after 24 hours. An inviter's random browser anchor remains while the invitation is active, because removing it earlier would disable the self-invitation check; it is removed after the invitation is completed, revoked, or detached and the 90-day retention window has passed.

Limited records that survive account deletion: up to 90 days. When you delete your account, we retain a purpose-separated irreversible hash of your email address to stop immediate re-registration for sign-up or invitation rewards, plus any de-identified invitation-graph node needed to prevent reward loops. Sign-up eligibility records and their network or random-browser-identifier hashes are deleted with the account. The retained records contain no account ID, name, raw email address, raw network address, or device characteristics; they cannot be used to contact you, and they are automatically deleted when the 90-day period ends. The email hash used for deletion cooldown is cryptographically separated from the email hash used for invitation checks, so those two datasets cannot be joined by equality.

If you delete your account, ImgVid removes your stored data, including your uploaded images, asset library, generated images and videos, videos shared on Explore and reviews, through an automated cleanup process. That process is designed to fail closed — if any required step does not complete successfully, your account is not marked as deleted. The limited, time-bound reward fairness records described above are deliberate exceptions. Necessary safety records and provider-held copies are also subject to the retention and deletion limits described under Content safety checks and reports. Reward eligibility rows that contain your account ID are deleted; financial ledger and lot records are retained only in anonymised form where required for balance integrity and audit.

Your rights

Under the UK GDPR you have the right to:

Access the personal data ImgVid holds about you, and get a copy of it.
Correct data that is wrong or incomplete.
Erase your data ("right to be forgotten") — you can do this yourself by deleting your account. The retention limits and exceptions described above also apply, including those under Content safety checks and reports. As described above, an irreversible hash of your email address is retained for up to 90 days to prevent immediate re-registration for rewards. ImgVid relies on its legitimate interest in preventing fraudulent claims for this; it expires automatically and cannot be used to identify or contact you.
Restrict or object to processing based on legitimate interests.
Port your data — receive it in a portable format, or have it sent to another provider.
Withdraw consent at any time, where processing is based on consent (such as a newsletter).

To exercise any of these rights, contact us. ImgVid will respond within one month. Using these rights is free, and ImgVid will not treat you differently for doing so.

Complaining to the ICO

If you think ImgVid has mishandled your personal data, please contact us first so it can be put right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113. Complaining to ImgVid first is not a precondition — you can go to the ICO directly.

Children's privacy

ImgVid is not intended for anyone under 13. Under UK data protection law, 13 is the youngest age at which someone can consent to an online service on their own. Anyone under 18 should use ImgVid only with a parent or guardian's permission, and purchases must be made by an adult (see our Terms of Service). ImgVid does not knowingly collect personal data from children under 13 — if you believe a child has created an account or uploaded images, please contact us so it can be removed.