Introduction

Lets Imagine, LLC, doing business as "Inflow" ("Inflow," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our AI-enhanced creative platform ("Service"). By accessing or using our Service, you agree to the terms of this Privacy Policy.

Our website is getinflow.ai ("Website").

1. Information We Collect

a. Personal Information

• Account Registration Data: Name, email address, password, company name, and contact information
• Profile Information: Industry, job title, design preferences, and other details you provide
• Payment Information: Billing address and payment method details (payment processing is handled by third-party services compliant with PCI-DSS standards)
• Communication Data: Information you provide when contacting us for support or other inquiries

b. Usage Data

• Technical Information: IP address, browser type, device information, operating system, and system configuration
• Interaction Data: Pages viewed, features used, time spent on the Service, clickstream data, and navigation paths
• Communications: Messages exchanged within the platform, feedback submissions, and customer support interactions

c. Content and Assets

• Uploaded Materials: Designs, images, logos, brand assets, and other content you upload to the Service
• Generated Designs: AI-generated designs and any derivative works created through your use of the Service
• Project Information: Project briefs, requirements, feedback, and revision history

d. Cookies and Tracking Technologies

• Cookies: We use session cookies, persistent cookies, and similar tracking technologies to enhance your experience
• Web Beacons and Pixels: Small graphic images or code that collect information about your interactions with the Service
• Analytics Tools: We use analytics services to understand how users interact with our Service

2. How We Use Your Information

a. Providing and Improving the Service

• AI Design Generation and Personalization: We use your data, including uploaded content and interaction data, to generate designs and personalize your experience using AI algorithms
• Service Delivery: Facilitate project creation, manage your account, and process transactions
• Technical Support: Address technical issues and provide customer support
• Service Improvement: Analyze usage patterns to improve our Service and develop new features

b. Communication

• Administrative Messages: Send account confirmations, updates, security alerts, and notifications
• Customer Support: Respond to your inquiries, troubleshoot issues, and provide assistance
• Marketing Communications: Send newsletters, offers, and promotional materials (with your consent, where required by law)
• Project Updates: Notify you about the status of your projects and design work

c. Analytics and Performance

• Usage Analysis: Analyze usage patterns to improve functionality, enhance user experience, and develop new features
• Automated Decision-Making: Utilize AI for automated processes, such as generating design suggestions and optimizing service performance
• Performance Monitoring: Ensure the Service is functioning properly and efficiently

d. AI Training and Enhancement

• Model Training: With your permission, we may use anonymized versions of your data to train and improve our AI models
• Quality Improvement: Enhance the accuracy and relevance of AI-generated designs
• Feature Development: Create new AI capabilities based on anonymized usage patterns

e. Legal Compliance

• Regulatory Compliance: Comply with legal obligations, resolve disputes, and enforce our agreements
• Fraud Prevention: Detect and prevent fraudulent activities and security incidents
• Legal Proceedings: Address legal claims and protect our rights

3. Legal Grounds for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide the Service as per our agreement with you
• Legitimate Interests: For security, analytics, improving our Service, and marketing (where not overridden by your rights)
• Consent: For sending marketing communications and using certain cookies (where required by law)
• Compliance with Legal Obligations: To meet legal and regulatory requirements

4. Automated Decision-Making and AI Usage

a. AI Processing and Data Usage

• Data in AI Models: Your data, including uploaded content and interaction data, may be used to train, validate, and improve our AI algorithms with your permission
• Transparency: We strive to ensure that our AI processes are transparent and understandable
• AI-Enhanced Design: Our Service uses AI to generate and enhance designs based on your inputs and preferences

b. User Control and Opt-Out

• Opt-Out of AI Processing: If you prefer not to have your data used in AI processing for certain purposes, you may contact us at privacy@getinflow.ai
• Impact on Service: Opting out may affect the functionality and personalization of the Service
• Alternative Processing: We will provide alternative methods where possible for users who opt out

5. Disclosure of Your Information

a. Service Providers

We may share your information with third-party vendors and service providers who perform services on our behalf, such as:

• Payment Processors: To process transactions
• Cloud Hosting Services: To store data and host the Service
• Analytics Providers: To analyze usage and improve the Service
• Marketing Partners: To help us communicate with you
• Design Professionals: To provide professional design services as part of our offering

These parties are contractually obligated to maintain the confidentiality of your information and are prohibited from using it for any other purpose.

b. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and outline your choices.

c. Legal Obligations

We may disclose your information:

• Compliance with Laws: If required by law, regulation, or legal process
• Protection of Rights: To protect the rights, property, or safety of Inflow, our users, or others
• Enforcement of Terms: To enforce our Terms of Service or other agreements

d. With Your Consent

We may share your information with third parties when you have given us your consent to do so.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

a. Security Measures

• Encryption: Data encryption in transit (using SSL/TLS) and at rest
• Access Controls: Restricted access to personal data to authorized personnel only
• Regular Audits: Periodic security assessments, vulnerability scanning, and penetration testing
• Two-Factor Authentication (2FA): We offer 2FA for added account security

b. Incident Response Plan

In the event of a data breach:

• Assessment: We will promptly assess the breach and its impact
• Notification: Affected users and appropriate authorities will be notified as required by law
• Mitigation: We will take necessary steps to mitigate the breach and prevent future occurrences

c. Your Responsibilities

• Account Security: Keep your password confidential and secure
• Unauthorized Access: Notify us immediately if you suspect any unauthorized use of your account

7. Data Retention

a. Retention Periods

• Account Data: We retain your personal information as long as your account is active or as needed to provide you with the Service
• Legal Requirements: We may retain certain information to comply with legal obligations, resolve disputes, or enforce agreements
• Anonymized Data: We may retain anonymized or aggregated data indefinitely

b. Deletion Requests

• Right to Erasure: You may request the deletion of your personal information by contacting us at privacy@getinflow.ai
• Response Timeline: We will respond to deletion requests within 30 days
• Exceptions: Some information may be retained for legal, security, or technical reasons even after deletion requests

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

a. Access and Correction

• Right to Access: Request a copy of your personal information
• Right to Rectification: Update or correct inaccurate personal information

b. Data Portability

• Right to Data Portability: Request a copy of your personal data in a structured, commonly used format

c. Opt-Out Options

• Marketing Communications: Unsubscribe from marketing emails using the "Unsubscribe" link
• Cookies and Tracking: Manage preferences through our Cookie Consent Mechanism or browser settings
• AI Processing: Opt out of having your data used for AI training

d. Objection and Restriction

• Right to Object: Object to the processing of your data for direct marketing or legitimate interests
• Right to Restrict Processing: Request to restrict processing of your data under certain circumstances

e. Automated Decision-Making

• Rights Regarding Automated Decisions: Request human intervention, express your point of view, and contest decisions made by automated processes

f. How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@getinflow.ai. We may need to verify your identity before fulfilling your request.

9. International Data Transfers

Your information may be transferred to, stored, or processed in countries other than your own, which may have different data protection laws.

a. Data Transfer Mechanisms

• Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission for data transfers from the EEA
• Adequacy Decisions: Transfer to countries deemed to provide an adequate level of data protection
• Other Legal Mechanisms: We use other legally valid transfer mechanisms where appropriate

b. Safeguards

We implement appropriate safeguards to ensure that your personal information receives an adequate level of protection wherever it is processed.

10. Cookies and Similar Technologies

a. Types of Cookies We Use

• Essential Cookies: Necessary for the operation of the Service
• Performance Cookies: Collect information about how users interact with the Service
• Functionality Cookies: Remember your preferences and personalize your experience
• Targeting Cookies: Deliver relevant advertisements and track marketing performance

b. Cookie Consent Mechanism

Upon your first visit, a banner will appear requesting your consent for cookies, with options to accept all, reject non-essential cookies, or customize preferences.

c. Managing Cookies

• Cookie Settings: Access and adjust your cookie preferences at any time via our Cookie Policy page
• Browser Settings: Manage or disable cookies through your browser settings

11. Children's Privacy

Our Service is not intended for individuals under the age of 16.

• Age Verification: We may implement age verification mechanisms during account registration
• Under 16: We do not knowingly collect personal information from children under 16
• Parental Consent: If required, we will obtain verifiable parental consent before collecting personal information from users under the applicable age threshold
• Removal of Data: If we become aware that we have collected personal information from a child without appropriate consent, we will delete it promptly

12. Retention of Generated and Uploaded Content

a. Content Retention Policy

• Storage Duration: Uploaded content and generated designs are stored as long as your account is active or as needed to provide the Service
• Post-Account Termination: Upon account closure, you may request immediate deletion of all your content

b. User Control

• Content Deletion: You can delete specific content or projects at any time through your account
• Backup Copies: Deleted content may remain in backup copies for a limited period but will not be available to others

13. Intellectual Property Rights

a. Ownership of AI-Generated Content

• Client Ownership: You retain ownership of the AI-generated designs and any derivative works created through your use of the Service, subject to compliance with our Terms of Service
• License to Inflow: By using the Service, you grant Inflow a non-exclusive, royalty-free license to use, reproduce, and display your uploaded content and generated designs solely for the purpose of providing and improving the Service

b. License for Marketing and Research

• Optional Consent: We may request your consent to use certain designs for marketing, promotional materials, or research purposes. This is optional, and your choice will not affect your use of the Service

14. Updates to This Privacy Policy

• Notification of Changes: Significant changes will be communicated via email or a prominent notice on our Service prior to the change becoming effective
• Effective Date: This Privacy Policy is effective as of March 5, 2025
• Continued Use: Your continued use of the Service after the effective date constitutes your acceptance of the revised Privacy Policy

15. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

a. Right to Know

• Request what personal information we collect, use, disclose, and sell
• Receive this information in a portable and readily usable format

b. Right to Delete

• Request deletion of your personal information subject to certain exceptions

c. Right to Opt-Out

• Opt-out of the sale or sharing of your personal information
• Limit the use and disclosure of sensitive personal information

d. Right to Non-Discrimination

• Receive equal service and pricing even if you exercise your privacy rights

To exercise these rights, contact us at privacy@getinflow.ai or call +1 (419) 350-7640.

16. European Privacy Rights

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and related laws:

a. GDPR Rights

• Access, rectification, erasure, restriction, objection, and portability rights
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority

b. Legal Basis for Processing

We process your data based on:

• Contract performance
• Legitimate interests
• Legal obligations
• Your consent

c. Data Controller

Lets Imagine, LLC is the data controller for your personal information. Contact our Data Protection Officer at dpo@getinflow.ai.

17. Third-Party Services and Links

Our Service may contain links to third-party websites or services not operated by us.

a. External Sites

• We are not responsible for the privacy practices of third-party sites
• We encourage you to review their privacy policies before providing any personal information

b. Third-Party Integrations

• If you choose to integrate your account with third-party services, we will share data with them as authorized by you
• Their use of your information is governed by their privacy policies

18. Data Breach Response

a. Incident Response Plan

• Notification Timeline: We will notify affected users and relevant authorities within 72 hours of becoming aware of a data breach, where required by law
• Communication Method: Notifications will be sent via email or through prominent notices on our Service
• Information Provided: We will provide information about the nature of the breach, likely consequences, and measures taken to mitigate harm

19. Contact Us

If you have any questions, concerns, or comments about this Privacy Policy, please contact us:

• Email: privacy@getinflow.ai
• Mailing Address:Lets Imagine, LLC dba Inflow1311 Vine StreetCincinnati, OH 45202
• Data Protection Officer: If you need to contact our Data Protection Officer, please email dpo@getinflow.ai
• Phone: +1 (419) 350-7640

‍