Privacy policy

Who we are

simgenerator is a product of Live Furnish, Inc., a Delaware corporation doing business as imagine.io. In this policy, “we”, “us” and “our” refer to Live Furnish, Inc.

This policy covers our website, accounts, asset and environment generation, library, APIs, online tools, and communications about simgenerator, including support and project enquiries. Other websites and services have their own privacy notices.

If you use simgenerator through an organisation, its administrators may manage your membership, access and organisation activity. Your organisation may have additional policies governing the information it supplies to the service.

Information we collect

• Account and organisation information. Your name, email address, sign-in details, verification status, organisation name, membership and role. If you sign in with Google, we receive the identity information needed to create or authenticate your account.
• Content and requests. Prompts, images, files and references you submit through supported features, project specifications, generated outputs, and the settings and messages associated with those requests.
• Service activity. Generation and tool activity, job status and diagnostic records, library purchases and download requests, credit use, API access and organisation activity.
• Billing information. Selected plans, subscription status, invoices, transaction references and credit purchases. Stripe processes checkout and payment-method information. We receive information needed to administer the purchase and your account.
• Communications. Information you provide when booking a meeting, requesting custom content, contacting support or responding to us, including your contact details, message and project requirements.
• Device and usage information. IP address, browser and device details, request and error logs, and, where optional tracking is enabled, page visits, campaign information, interactions and preferences.

We receive information directly from you, from your use of the service, and from providers such as sign-in, payment and meeting-booking services. An organisation administrator may also provide your email address when inviting you.

The validator, packager and browser simulator process selected local files in your browser. Opening a package from a URL also requests that file from its host. Uploading a reference for AI generation is a separate action that sends the reference to our generation service.

How we use information

• Create accounts, authenticate users, verify email addresses and manage organisation access.
• Process generation requests, provide outputs and history, make library content available, and operate APIs and tools.
• Administer subscriptions, payments, invoices, entitlements and credit balances.
• Respond to enquiries, arrange meetings, deliver custom projects and send service communications.
• Detect misuse, protect accounts, diagnose failures, maintain reliability and meet legal obligations.
• Understand product use, improve the service and measure marketing where permitted and subject to the choices described below.

Contact and account records may be maintained in our customer relationship management system to support these services. Rejecting optional website tracking does not prevent us from processing information necessary to handle a request, provide your account or complete a transaction.

AI generation and your content

Generation requests can contain your prompts, reference images and other supported inputs. We process these together with job settings, intermediate results, outputs and diagnostic records to operate and support generation. Information needed for a request may be sent to AI service providers. The generation system supports OpenAI and, for some configurations, DeepSeek.

Inputs, references and generated content associated with an organisation may be accessible to other authorised members of that organisation. Submit only information you are entitled to use and share, and avoid including unnecessary personal information in prompts or files.

Our commercial licence permits us to use covered inputs and generated content to train, fine-tune, validate, test and improve our own models and service, subject to its confidentiality restrictions. A signed Enterprise agreement can exclude that use. Custom Content covered by clause 6 of that licence is excluded from model improvement. Free-plan content and separately commissioned projects are governed by their applicable terms.

The cookie controls manage optional tracking. They do not change the content-use terms of a generation request or a project agreement. Contractual rights in content do not remove privacy rights that apply to personal information within it. AI providers also process information under the terms applicable to the services we use; contact us if you need details for a proposed project.

Claude, ChatGPT and other AI apps

You can connect simgenerator to an AI app, such as Claude or ChatGPT, through our MCP server. Connecting opens simgenerator, where you sign in and choose the organisation the app may act for. We then create an API key for that organisation, labelled with the app’s name, and keep it encrypted on our servers. The app receives only our own access tokens. They last one hour and are renewed while the connection is in use; a connection unused for 30 days ends.

When the app calls a simgenerator tool, we receive what that tool needs: your description of an asset or environment, the detail level, job identifiers, the planned assets you choose, and any public image link you ask it to use as a reference, which we fetch and store as a reference. We do not receive your conversation, your other messages or information from other apps. The app provider’s own terms and privacy policy govern what it does with your conversation and with the results our tools return.

Jobs started from an AI app are generation requests like any other. They spend your organisation’s credits, appear in your account and are handled as this policy describes. To disconnect, remove simgenerator in the app’s settings or revoke the app’s key on the API keys page. Revoking the key ends the connection within a minute.

Who receives information

• Infrastructure and service providers. Hosting, storage, delivery, security, email and AI providers process information needed to run the service. Our infrastructure includes Amazon Web Services and Vercel.
• Payment and identity providers. Stripe handles payments. Google supports Google sign-in and security features where used.
• Support and customer management. HubSpot supports contact records, enquiries and meeting bookings, as well as optional website tracking.
• Analytics and advertising providers. Google Analytics, Vercel Analytics and Speed Insights, Userpilot, Hotjar, and configured advertising integrations including Google Ads and Meta receive information according to their purposes, regional settings and applicable tracking choices.
• Your organisation and chosen recipients. Authorised team members can access information made available within their organisation. If you choose to share content or use an external service, that service's privacy practices also apply.
• Legal and business recipients. Information may be disclosed where required by law, to address fraud or security incidents, to protect legal rights, or as part of a corporate transaction such as an acquisition, subject to applicable protections.

Optional advertising integrations may receive online identifiers, activity and campaign information. This can constitute “sharing” for targeted advertising under some privacy laws. You can disable advertising tracking through Privacy choices or the footer's Do not sell or share my personal information control. Global Privacy Control also keeps that tracking off.

Cookies and tracking

Essential cookies and browser storage support sign-in, security, service workflows and remembering your preferences. Optional controls cover analytics and product improvement, advertising, and session recordings.

Website analytics can measure visits and performance. Userpilot can associate product activity with your account, name, email address and organisation details. With your permission, Hotjar can record interactions on selected public information pages while signed out, in supported browsers. The homepage, library, digital-twin, pricing, sign-in, generation, account and payment screens are excluded. HubSpot website tracking and configured Google Ads and Meta tags support marketing measurement and remarketing.

In recognised US states, including California, analytics, product analytics and advertising may run unless you opt out. In Australia and New Zealand, analytics and product analytics may run unless you opt out, while advertising requires your permission. In other locations, or when we cannot establish the country or US state, optional tracking stays off until you allow it. Saved refusals continue to apply, and Global Privacy Control keeps advertising off. Session recordings always require your permission. We use coarse country and state information to apply these settings.

Got it dismisses the regional notice without recording consent or changing your settings. Previously saved choices continue to apply. Turning off optional tracking does not affect access to the service. Changing your choices stops future optional tracking for the disabled purposes; it does not by itself delete information already received by providers.

Our cookie notice explains these controls, how preferences are remembered and where to find provider privacy notices.

Our grounds for processing

Where applicable law requires a legal basis, we process information as necessary to provide services you request or perform a contract, to meet legal obligations, for legitimate interests such as security and service administration where those interests are not overridden by your rights, or with consent where required. You may withdraw consent without affecting processing that was lawful before withdrawal.

How long we keep information

Retention depends on the type of information and why it is needed. Account and organisation records support the ongoing service. Generation inputs, outputs and job records support delivery, history and troubleshooting, and any content use permitted by the applicable agreement. Billing and transaction records may need to be retained for accounting, tax, dispute resolution and other legal requirements.

We consider the duration of our relationship, the sensitivity of the information, security needs, contractual commitments and applicable legal requirements when deciding retention. Copies in logs, archives or backups may remain after an item is removed from the active interface. Removing content from your account is not necessarily deletion from every system.

To request deletion or ask about retention for a particular category, contact us using the details below. We will assess the request under applicable law, including any requirements to retain certain records. The duration of a cookie preference is separate from the retention of account or service information.

Security and international processing

We use access controls and other technical and organisational measures designed to protect information. No internet service or storage system can guarantee complete security. Protect your password and API keys, and contact us if you believe your account has been compromised.

We are based in the United States. We and our providers may process information in the United States and other countries where we operate. Privacy laws may differ from those in your country. Contact us for information about processing locations and the transfer arrangements applicable to your service or organisation agreement.

Your rights and choices

Depending on your location and the law that applies, you may have rights to know about and access your personal information, correct it, request deletion or a portable copy, object to or restrict certain processing, withdraw consent, and opt out of sale, sharing or targeted advertising. Additional rights may apply to sensitive personal information and certain automated decisions.

You can update available profile fields in your account and change optional tracking in Privacy choices. You can unsubscribe from marketing emails using the message's unsubscribe instructions or contact us. Essential service messages, such as verification, security and billing notices, may still be sent.

Send privacy requests to admin@imagine.io. We may need information to verify your identity and authority before acting. An authorised agent may contact us on your behalf where permitted. If a request is declined, you may ask us to review the decision or appeal where applicable. You may also contact your local privacy regulator. We will not discriminate against you for exercising rights protected by applicable law.

Children

simgenerator is intended for professional users and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.

Policy updates

We may update this policy as our service or practices change. The date above identifies the latest revision. We will provide additional notice or seek consent where required. Continued use of the website is not consent to optional tracking.

Contact us

For questions about this policy or a privacy request, email admin@imagine.io and mention simgenerator so we can direct your enquiry.