Users in the EU, UK, and Switzerland have legal rights over their personal data, and Ideogram acknowledges that it may transfer their data to countries — including the US — that have weaker privacy protections.
If you are in the EU or UK, your personal data including prompts and account information may be transferred to the United States, where data protection standards differ from those required under GDPR, creating potential risks to your privacy rights.
Cross-platform context
See how other platforms handle EU/EEA User Rights and International Data Transfers and similar clauses.
Compare across platforms →Cross-border transfers of EU personal data to the US require specific legal safeguards under GDPR; the policy's acknowledgment of these transfers without specifying the mechanism (Standard Contractual Clauses, adequacy decision, etc.) is a compliance gap.
(1) REGULATORY FRAMEWORK: GDPR Chapter V (Arts. 44-49) governs international data transfers; lawful transfer mechanisms include EU-US Data Privacy Framework adequacy decision (adopted July 2023, subject to ongoing legal challenge), Standard Contractual Clauses (Commission Decision 2021/914), or Binding Corporate Rules. UK GDPR requires equivalent transfer safeguards via the UK-US Data Bridge (effective October 2023). GDPR Art. 13(1)(f) requires disclosure of transfer mechanisms at point of data collection. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.