Privacy policy.

1.Who we are and what this covers

ImagineAcademy (the “Academy”) is the learning platform for Imagine.art creators. It is operated by Vyro Turkey Teknoloji Limited Sirketi(“we”, “us”), Idealtepe Mh. Dik Sk. No. 13 K2 Maltepe, Istanbul, Turkey, which is the controller of the personal data described in this policy. This policy covers everything you do on the Academy website, including browsing, joining by email, signing in with Google, registering for an ImagineLive session, downloading a resource pack and taking a course.

The Academy is a companion to the Imagine.art product. Your use of Imagine.art itself is covered by the Imagine.art privacy policy. Where you use both, the two policies apply side by side and we may link the records as described in section 4.

2.What we collect

We collect three kinds of information.

Information you give us

• Your name and email address, when you join by email, register for an ImagineLive session or continue with Google. Your email address is how we recognise you: every record we hold about you is tied to it.
• Professional details you choose to add: company, job title, what you work on, how you heard about us, LinkedIn profile URL and phone number. Every one of these is optional and shown as optional.
• Your settings: display name, interests, playback and motion preferences, and email preferences.

Information from Google, if you sign in with Google

We ask Google for the standard sign-in scopes only (openid, email, profile) and receive your name, email address and the URL of your profile picture. We do not request access to your Google account beyond that, we receive no password, and we store no token that could act on your behalf.

Information generated as you use the Academy

• Learning activity: which lessons you opened and when, which you marked complete, and which resource packs you downloaded and how often.
• Session registrations: the ImagineLive sessions you registered for, when, and whether we sent you a reminder or a follow-up.
• Account events: when the account was created and when you last signed in.
• Emails we sent you: a log of each message (recipient, type, time, and any delivery error) so that we never send the same one twice.
• Where you came from, only if you accept analytics cookies: the page you landed on, the referring site, and any campaign tags (utm_*) in the link, tied to a random browser identifier so that a visit before you joined can be matched to your membership afterwards. See the cookie policy.
• Technical logs kept by our hosting provider for security and reliability: IP address, browser type, requested URL and timestamps.

We do not collect payment details (the Academy is free), precise location, or anything from your device beyond what a normal web request carries.

3.How we use it

• To run the Academy for you: keep you signed in, remember your progress and resume point, show your settings, gate member-only lessons, and issue a Member ID that stays with you and appears on any certificate you earn.
• To run ImagineLive: save your seat, send the confirmation, send one reminder before the session and one follow-up with the replay afterwards.
• To tell you about the Academy: new courses, lessons and live sessions, by email. You can stop these at any time (section 8).
• To follow up with you about Imagine.art. The Academy is also how we meet the creative professionals who use our tools. Your membership record, including the professional details you chose to add and your registrations, is available to the Imagine.art sales and customer team, who may contact you about Imagine.art products and services relevant to what you told us you work on.
• To understand what works: which campaigns bring members, which sessions fill up, how far people get through a course. We do this with aggregate reports and with product analytics keyed to an internal account identifier (section 5).
• To keep the service safe: detect abuse, debug failures and protect member accounts.
• To meet legal obligations and to enforce our terms of use.

We do not sell your personal data and we do not use it for advertising on other sites.

4.Our legal bases

Where the GDPR, the UK GDPR or a similar law applies, we rely on the following bases.

• Performance of a contract (our terms) for providing the Academy, your account, your progress and your session registrations.
• Consent for the analytics and attribution cookies, and for optional profile details you choose to give. You can withdraw consent at any time; withdrawal does not affect what happened before.
• Legitimate interests for emailing existing members about the Academy, for following up with professionals who registered for a session about relevant Imagine.art products, for linking your Academy and Imagine.art records when both exist, for security, and for aggregate measurement. We have weighed these interests against your rights, you can object at any time (section 8), and we do not use them for anything you would not reasonably expect from an educational programme run by a software company.
• Legal obligation where we must keep or disclose records by law.

5.Who we share it with

We share personal data only with the parties below, and only as much as each needs.

Service providers acting for us

• Vercel (Vercel Inc., USA), which hosts the website and keeps the technical logs described above.
• Supabase (Supabase Inc., USA), which hosts the database holding your account, progress and registrations.
• Resend (Resend Inc., USA), which delivers our emails and sees the recipient address and message content.
• Mixpanel(Mixpanel Inc., USA), our product-analytics provider. We send it events such as “signed up”, “registered for a session” and “completed a lesson”, keyed to your internal account identifier and email address so that your Academy activity and your Imagine.art activity can be seen as one journey. These are server-to-server calls; Mixpanel places no code and no cookie in your browser through the Academy.
• Google (Google LLC / Google Ireland Ltd), when you choose to sign in with Google, and YouTube, which hosts lesson and replay videos. Video embeds are loaded from youtube-nocookie.com and set nothing until you press play; once you do, Google processes your viewing under its own privacy policy.

Within our company

Academy staff who run the programme (instructors, curriculum and studio administrators) see member records as needed to do so. The Imagine.art sales and customer team receives member and registration records as described in section 3.

Others

• Live-stream platforms. ImagineLive sessions may be streamed on LinkedIn Live or X. If you watch or comment there, that platform processes your data under its own terms; registering on the Academy shares nothing with them.
• Authorities and legal process, where we are required to, or to protect the rights, safety or property of our members or ourselves.
• A successor, if our business or the Academy is sold, merged or reorganised, under this same policy.

6.International transfers

Our providers store and process data in the United States and, for hosting, in the regions their networks use. Where data leaves the country you are in, we rely on the provider’s standard contractual clauses or an equivalent recognised safeguard, and on the technical measures in section 9. You can ask us for details of the safeguards in place for any provider.

7.How long we keep it

• Your account, progress and preferences: for as long as you are a member. When you delete your account from Settings, they are deleted immediately and permanently, along with your registrations, downloads and attribution records.
• Membership records created without an account (join by email, session registration): until you ask us to remove them. Email support@imagine.art and we will.
• The email log: kept while the corresponding account or registration exists, so a message is never sent twice.
• Analytics eventsheld by Mixpanel: according to that account’s retention setting, and deleted on request.
• Hosting logs: for a short rolling period set by Vercel, typically days.
• Aggregate statistics that no longer identify anyone may be kept indefinitely.

8.Your rights and choices

Wherever you live, we give you the same controls. Depending on your jurisdiction, several of them are also legal rights, including under the GDPR, the UK GDPR, the Turkish Law on the Protection of Personal Data (KVKK) and US state privacy laws such as the CCPA/CPRA.

• See what we hold.Signed-in members can download a copy of every record tied to their account from the “Your data” panel in Settings, as a machine-readable file. Anyone can email us for the same.
• Correct it. Name, professional details, interests and preferences are editable in Settings. Your email address comes from Google or from what you typed; to change it, contact us.
• Delete it.The “Delete account” panel in Settings removes your account and everything attached to it at once. Without an account, email us.
• Stop emails. Reply to any message we send, or email support@imagine.art, and we will stop. Reminder and follow-up preferences are also in Settings.
• Object or restrict. You can object to processing based on legitimate interests, including sales follow-up, and ask us to limit what we do while we look into it.
• Withdraw cookie consentat any time from “Cookie settings” in the footer.
• Complain. You can lodge a complaint with your local data-protection authority. We would appreciate the chance to answer first.

We answer requests within one month, and we may ask you to confirm you own the email address concerned before acting on one. We never discriminate against you for exercising a right.

9.Security

All traffic to the Academy is encrypted in transit. The database accepts connections only from our application, and access to it and to the studio is limited to named staff with a role. Sign-in tokens are signed and unreadable by page scripts. Resource files are served only through an authenticated route. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the relevant authority as the law requires.

10.Children

The Academy is for working and aspiring creative professionals and is not directed at anyone under 16. We do not knowingly collect personal data from anyone under that age; if you believe we have, email support@imagine.art and we will delete it.

11.Changes to this policy

When we change what we collect or how we use it, we update this page and the effective date at the top. For a change that matters to you, such as a new purpose or a new category of recipient, we will also tell members by email or with a notice on the site before it takes effect.

12.How to reach us

Email support@imagine.art for anything in this policy. Write to Vyro Turkey Teknoloji Limited Sirketi, Idealtepe Mh. Dik Sk. No. 13 K2 Maltepe, Istanbul, Turkey.