Ideogram Privacy Policy

Ideogram's Privacy Policy governs the collection, use, and disclosure of personal data by Ideogram AI, a Canadian-incorporated AI image generation company, and operates under a consent and legitimate interests framework applicable to users globally. The policy states that Ideogram collects account information (name, email, profile data), user-generated content including text prompts and images, device and usage data, payment information processed via third-party processors, and data from third-party sign-in providers such as Google; the terms authorize use of this data for service delivery, product improvement, safety enforcement, and marketing communications. Notably, the policy explicitly states that user-generated content such as prompts and generated images may be used to train and improve Ideogram's AI models, with no default opt-out mechanism described for existing users, which is a material consideration for users who submit creative or potentially sensitive content. The policy references compliance obligations under GDPR for EU/EEA users and CCPA/CPRA for California residents, providing region-specific rights disclosures; Canadian privacy law (PIPEDA or its provincial equivalents) is also implicated given the company's incorporation in Canada. Compliance teams should note that the AI training use of user content, combined with the cross-border data transfer disclosures referencing standard contractual clauses, creates obligations under GDPR Chapter V and may require evaluation under emerging EU AI Act provisions governing training data transparency.