Legal document

Privacy policy

Imalyn — DUSHAT · Last updated: 04/06/2026

Courtesy translation. The Spanish version is the only legally binding one.

At Imalyn, operated by DUSHAT, we take your privacy seriously. This policy explains what personal data we process, for what purpose, and what rights you have over it.

1. Data controller

The controller of your data is DUSHAT, operator of Imalyn. For any question regarding your personal data you can write to us at hola@imalyn.com.

2. Data we process

We process the following data, depending on how you use the service:

  • Account data: your username and email address, and your password, which is always stored encrypted, never in plain text.
  • Images you upload or generate: they are processed solely to create your vector result and are automatically deleted after 24 hours.
  • Payment data: if you subscribe to a paid plan, the payment is handled by Stripe; we do not store your card details.
  • Google sign-in: if you sign in with Google, we receive your email and basic profile data to create or identify your account.
  • Technical data: the minimum information needed for the service to work (session, language) and to prevent abuse of the service.

3. Purposes and legal basis

We process your data to provide the service and manage your account, process payments, and send transactional emails (such as email verification or password reset), all on the basis of performance of the contract. We also process technical data to prevent fraud and abuse of the service, on the basis of our legitimate interest.

4. Data retention

Images you upload or generate are automatically deleted after 24 hours. Your account data is kept while the account is active; if you delete it, the data is erased, except for what we must retain due to legal obligations, for example billing.

5. Recipients and providers

We do not sell your data. To provide the service we rely on providers acting as data processors:

  • Image-processing and artificial-intelligence providers, which perform the vectorization and image generation.
  • Stripe, for payment processing.
  • Google, if you use Google sign-in.

Some of these providers may process data outside the European Economic Area; in that case, the appropriate safeguards provided for by data protection law apply.

6. Cookies

We use only technical cookies necessary for the site to work: a session cookie to keep you signed in and a cookie to remember your language. We do not use advertising or third-party tracking cookies.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to us at hola@imalyn.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency if you believe the processing of your data does not comply with the applicable rules.

8. Security

We apply reasonable technical and organizational measures to protect your data, such as encryption of passwords and communications. No system is completely infallible, but we work to minimize the risks.

9. Changes to this policy

We may update this policy to reflect changes in the service or in the law. We will publish any changes on this same page, indicating the date of the last update.

10. Contact

For any question about this policy or your personal data: hola@imalyn.com.