Imitation AI

Privacy Policy

Last updated: February 2026

1. Introduction

Imitation AI ("we", "our", "us") operates https://imitation.works. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the GDPR.

Controller:
Marjan Milosavljević
Rotenhofg. 60, 1100 Vienna, Austria
Email: [email protected]

2. Data We Collect

2.1 Account Data

  • Email address
  • Name (if provided)
  • Profile information from OAuth providers (Google, GitHub)

2.2 Usage Data

  • Projects, boards, and prompts you create
  • AI model preferences
  • Log data (IP address, browser type, access times)

2.3 Payment Data

  • Processed by Stripe (we do not store credit card numbers)
  • Billing address and transaction history

3. How We Use Your Data

  • To provide and maintain our service
  • To process payments and subscriptions
  • To send service-related communications
  • To improve our platform
  • To comply with legal obligations

4. Data Processors & Third Parties

  • Supabase — Authentication & Database — Frankfurt, Germany (EU)
  • Hetzner — Server Hosting — Germany (EU)
  • Stripe — Payment Processing — EU/US
  • OpenRouter — AI API Gateway — US
  • Google — OAuth Authentication — US
  • GitHub — OAuth Authentication — US

AI Processing Notice: When you use our AI features, your prompts are sent to third-party AI providers (Anthropic Claude, OpenAI GPT, Google Gemini, Mistral) via OpenRouter.

5. Data Retention

  • Account data: Until you delete your account
  • Usage data: Until you delete your account
  • Payment records: 7 years (legal requirement)
  • Server logs: 30 days

6. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact: [email protected]

7. Data Security

  • SSL/TLS encryption
  • Data stored in EU data centers
  • Regular security updates
  • Access controls

8. Cookies

We use essential cookies only. No tracking or advertising cookies.

9. Children's Privacy

Our service is not intended for users under 16 years of age.

10. Changes to This Policy

We may update this Privacy Policy.

11. Contact

Marjan Milosavljević
Email: [email protected]

Supervisory Authority:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42, 1030 Vienna
https://www.dsb.gv.at