Privacy policy

Last updated: 28 October 2026

The controller of your personal data is BIOMAG S.L.U. (B01037241), Barratxi 39, Pab. 3, 01013 Vitoria-Gasteiz (Álava), España. Contact: info@biomag.es.

Your files

The AIM CREATE editors run in your browser. The files you open, edit and save are not sent to our servers: they stay on your computer. We do not have access to them.

AIM Genera

AIM Genera is the exception: it creates on our servers, and only if you have an account and use it. When you do, we process what you write, the images you add (including your characters and your brand logo) and the results. Purpose: to create what you ask for, to check beforehand that it complies with the usage rules, and to deliver the result. Legal basis: performance of the contract.

• What you write and the images you add are sent to our external AI generation and automated review provider, which may be located outside the European Union, only to produce and review each request.
• Results are deleted after 30 days and the images you upload as references after 2 days; your characters and your logo, when you delete them or your account. The record of each generation (operation, prompt and credits) is kept while your account exists so that you can see your history.
• Every result says in its metadata that it was generated with AI.
• If you use “This doesn’t work for me”, we keep the reason you give to improve the service.

What data we process, and why

• Account (only if you create one): your email address, the language you chose, your plan and its dates. Purpose: to let you sign in and to provide the plan you have chosen. Legal basis: performance of the contract.
• Payments: processed by Stripe, through its Link service, the Merchant of Record for our orders, which processes your payment and billing details as an independent controller under its own privacy policy. To pay you go to its page; nothing from outside is loaded on our site. We only receive your email, the state of your subscription or purchase and the identifiers needed to manage them.
• Waiting list: if you leave your email to be told when payment opens, we use it only for that message.
• Technical records: the server keeps minimal technical records (such as a sign-in attempt counter per address) to protect the service from abuse, for a short time.

Service providers

• Railway (hosting of the website and the accounts database, in the European Union).
• Resend (sending the sign-in emails).
• Stripe and Link (payments and invoicing, as Merchant of Record).
• An AI generation and automated review provider (AIM Genera only, as described above).
• Professional advisers and public authorities, only when the law requires it.

International transfers

Some providers (Resend, Stripe and Link, and the AI provider of AIM Genera) may process data outside the European Economic Area. In those cases the transfer is covered by an adequacy decision of the European Commission or by the Standard Contractual Clauses approved by it.

Security

We protect your data with encrypted connections (HTTPS), single-use sign-in links, minimal data collection and access limited to the people who need it to run the service.

Cookies

We only use one technical cookie (sid) to keep you signed in, and only once you sign in. We use no analytics or advertising cookies, so no cookie banner is needed. Stripe may set its own cookies on its payment page.

Retention

We keep your account data while your account exists. You can delete your account at any time from your account; invoicing data is kept by Stripe and Link for the period required by tax law.

Your rights

You can access, rectify, erase, restrict, object to the processing of and port your data, and withdraw any consent you have given, by writing to info@biomag.es. We answer within one month. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).