Privacy Policy
Last Updated: 4th February 2026
Induo ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our image processing service (the "Service").
1. Information We Collect
We collect data to provide the Service and ensure its security. This includes:
1.1. Your information
API
As part of signing up to our Service, we collect your name, email address, and billing information (processed by our third-party payment provider).
Shopify
For shopify stores we collect the following information:
- Store Name: The name of your Shopify store.
- Store URL: The URL of your Shopify store.
- Shopify token: The token of your Shopify store used to serve content back to your store.
- Shopify scope: The scope of your Shopify store used to serve content back to your store.
1.2. User Content (The Images)
When you use our Service, we collect the following information to provide the Service:
- User Image: Your user's image you transmit to our Service endpoints for processing.
- Product Images: The product images you provide to our Service endpoints for processing.
- Output Image: The resulting images we generated by our algorithms based on your User and Product Image.
1.3. Service Usage Data
- Metadata: Technical data embedded in the Service requests, provided by you for reporting purposes, such as
user_id,campaign_id, etc. - Log Data: When you send a request to the Service, we automatically record information such as your IP address, request timestamp, HTTP status codes, latency metrics, and the size of the request payload.
- Service Credentials: We store and validate the API keys or authentication tokens assigned to your account.
2. How We Process Your Images
To improve the quality of our service, we process your data.
2.1. Processing for Service Delivery
We use User Image and Product Images to perform the image generation or manipulation requested by you.
2.2. AI Model Training
We may use User Image, Product Images and Output Image to analyze the performance of our algorithms and improve our machine learning models. We aggregate this data so it is not linked to your specific account.
2.3. Safety Checking
We may use anonymized User Image and Product Images to analyze and report on unsafe use of our service. This is to ensure the safety of our users and the integrity of our service.
3. Data Retention
We store images on our server and delete them after a short period of time. The exact duration of time is not specified as it is subject to change based on data constraints.
4. Third-Party Sub-Processors
The following data types are shared with third-party sub-processors, belows list the exact data types shared with each third-party sub-processor:
| Service Provider | Data Type | Purpose | Location |
|---|---|---|---|
| Google Cloud | User/Product/Output Image | Hosting and server infrastructure | United States, Europe, Asia |
| Stripe | Billing details | Payment processing | United States, Europe, Asia |
| MongoAtlas | Customer details | Database storage | United States, Europe, Asia |
5. Security
We implement industry-standard security measures to protect your data:
- Encryption in Transit: All data transmitted between your client and our API is encrypted using TLS 1.2/1.3 (HTTPS).
- Encryption at Rest: Images stored temporarily are encrypted on disk.
- Access Control: API keys are hashed, and access to internal servers is restricted to authorized engineering personnel.
- User passwords: User passwords are hashed using bcrypt, a strong password hashing algorithm which does not expose your password.
6. Your Rights
Depending on your location, you may have specific rights regarding your personal data:
- GDPR (Europe/UK): You have the right to request access to, correction of, or deletion of your personal data.
- CCPA (California): You have the right to know what personal information we collect and we do not sell your data.
To exercise these rights, please contact us at support@induo.ai.
7. International Data Transfers
Our core servers are located in Europe. By using the Service, you acknowledge that your Input Images will be transferred to and processed in Europe, which may have different data protection laws than your country of residence.
Your data may be then be cached locally on the server for performance reasons.
8. Changes to This Policy
We may update this policy as our Service evolves. If we make material changes, we will notify you via the email associated with your API account or a prominent notice in our developer documentation.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
- Email: support@induo.ai
- Address: [Pending]