Privacy Policy
IMAGINE Watch Designer Portal · editor.imaginewatch.com
Effective date: 6 October 2026
This notice explains how we handle personal data when you register, sign in and use the IMAGINE Watch Designer Portal, including optional Google sign-in. Purchasing watches in the IMAGINE webshop is a separate process; this notice covers the designer portal and its connections to publication, production and designer earnings.
1. Data controller and contact
Evolvens Group Kft.
Registered office: 1051 Budapest, Október 6. utca 24. 4/5, Hungary
Tax number: 14673111-2-41
EU VAT number: HU14673111
Privacy contact: info@evolvens.com
Use this email address for questions about your personal data or to exercise your rights.
2. Data we handle and where it comes from
- Account: first and last name, artist name, email, internal user ID, account status and sign-in timestamps. Email/password accounts use a password hash. Recovery requests create a hashed, time-limited password-reset record.
- Designer profile: biography, profile and banner images, optional social media or website links, and submission/review information.
- Designs and production: uploaded artwork and files, saved watch settings, titles, descriptions, previews, product references, project status, requests and review communications. Files and descriptions can contain personal data you include.
- Communications: contact-form messages and related account, support, publication or production correspondence.
- Earnings: where applicable, sales and commissions associated with your designs, statements, invoice numbers, uploaded invoice PDFs and payment-review records. Invoices may contain your name, address, tax details or bank information. Shopify supplies order and merchandise references needed for commissions; the earnings integration does not persist buyer names, emails, contact details or addresses.
- Technical information: session identifiers, request/error information and limited usage counters needed to operate and protect the service. Hosting service logs may include IP addresses, request times, URLs and browser information.
You supply account, profile, design and communication data. Google supplies identity information if you choose Google sign-in; Shopify supplies relevant sales information. Our team creates review, publication and settlement records while providing the service.
3. Optional Sign in with Google
We request only the openid, email and profile permissions. Google provides a stable account identifier, verified email and available name information. We use these to authenticate you, link your Google identity to your IMAGINE account and prefill registration details.
The linked identity record stores the Google identifier and Google email against your internal account ID. Names can become part of the registration details you complete. We do not import the Google profile photo into your designer profile; you upload your designer images yourself.
This integration does not request Gmail, contacts, Drive, Calendar or payment access. Your Google password is entered at Google and is not received by the portal. We do not request offline access or store Google refresh tokens. Authentication tokens are verified during sign-in and are not persisted as account records.
Google identity data is used for registration, authentication, account linking and associated service communications. Your Google identifier and Google email are not public designer-profile fields. This integration does not use Google identity data for advertising or sell it to others; your Google identifier is not passed to AI help.
Google sign-in is optional; email/password registration remains available. An existing account with a matching email is connected only through its signed-in Account page. You can manage access in your Google Account connections. Removing access there does not delete your IMAGINE account. Google also processes data under Google's Privacy Policy.
4. Purposes and legal bases
- Requested service: registration, authentication, project storage, profile review, design publication, production coordination, earnings administration and service communications support our service relationship or steps you request before it (GDPR Article 6(1)(b)).
- Security, support and claims: necessary troubleshooting, rate limits, access checks, support handling and protection of legal claims rely on our legitimate interests in a secure, functioning service and resolving disputes (Article 6(1)(f)). You can object as described below.
- Legal obligations: accounting, tax and other records required by applicable law are processed under Article 6(1)(c).
Google sign-in and AI help are optional ways to use the requested service. Reading this notice does not subscribe you to marketing. If a future feature relies on separate consent, we will request it for that feature and explain withdrawal.
The current designer registration requires first and last name, artist name, email, biography and designer images. Without those details we cannot complete the requested designer registration. Social links and Google sign-in are optional.
5. Publication, access and providers
Your artist name, biography, profile/banner images, social links and published design/product information are intended for public designer and product pages after review and publication. Others can view, copy or index published material. Login credentials and Google identifiers are not published. Avoid personal information you do not want included in a public design or profile.
Our authorised team can access information necessary for support, review, publication, production and accounting. Providers and recipients include:
- GoDaddy: hosting and server-based email delivery infrastructure. See its Data Processing Addendum.
- Google: optional sign-in and email services used for correspondence. Google sign-in requests only the identity permissions above.
- Shopify: when our team synchronises your profile/design, the webshop receives public designer information, social links, product descriptions, artwork/previews and publication references. See Shopify's Data Processing Addendum.
- OpenAI: when AI help is available and you use it, your question, up to six recent conversation messages and limited page/project context are sent to the API. Context contains status/watch-type information, not your account email, Google identifier or artwork. An admin-operated image feature can send a watch reference image and scene instructions to create lifestyle product images; personal data is included only if present in those inputs. See OpenAI's Data Processing Addendum and API data controls.
- Production and accounting recipients: authorised production personnel and accounting service providers receive information needed to fulfil orders, administer remuneration or meet legal obligations. Competent authorities can receive relevant records where required by law.
Do not include passwords, credentials, unnecessary personal details or confidential artwork in AI help questions. Help chat stays in the current page's memory rather than a portal chat archive; clearing it or leaving the page clears that local history. Help API requests disable response storage. OpenAI can nevertheless retain API content in abuse-monitoring records, normally up to 30 days, with exceptions for legal requirements or protecting its service or others.
Some provider infrastructure operates outside the European Economic Area, including the United States or Canada. Their applicable processing terms describe transfer arrangements, including adequacy decisions where applicable or Standard Contractual Clauses. Use the provider links above or contact info@evolvens.com for information about safeguards relevant to your data.
6. Retention and deletion
We retain data for the purposes below and remove or anonymise it when those purposes end, except where a specific legal obligation or necessary, documented legal claim requires continued retention. Deleting a live account is distinct from removing published shop material, accounting evidence or a recovery copy.
| Data | Period or retention criterion |
|---|---|
| Live account, Google identity, private profile and projects | For the account's lifetime, until account deletion or a valid erasure request. Suspension does not itself erase an account; there is no fixed inactivity deletion timer. |
| Published shop content and production records | While the publication/production relationship continues or records are needed for outstanding orders and associated claims. Account deletion does not automatically remove Shopify copies or production archives; request removal through the privacy contact. |
| Support correspondence | Until the enquiry and related service issue or necessary claim are closed. Closed correspondence is reviewed for deletion; legal or accounting evidence follows the applicable obligation. |
| Invoices and accounting evidence | At least eight years for documents covered by Hungarian accounting retention rules, under Section 169 of Act C of 2000. Necessary financial records remain separate from normal account deletion. |
| Google sign-in state / unfinished registration | Valid for ten / thirty minutes. Temporary data is cleared on completion, cancellation or when checked after expiry; residual session files follow hosting session cleanup. |
| Password recovery | Links expire after sixty minutes. Hashed records are account security data; link expiry does not immediately erase the record. |
| AI help history and quota counters | History stays in page memory until cleared or the page is left. Server quota counters contain IDs, counts and timestamps, not messages; a later request on a new UTC day replaces the previous daily quota state. OpenAI's separate retention is described above. |
| Diagnostic and security logs | For diagnosis, abuse prevention and identified incidents, no longer than needed for those purposes. Provider logs also follow hosting retention/rotation settings; relevant incident evidence can remain while the investigation or necessary claim is open. |
| Recovery backups | Until expiry/replacement in the hosting service's active backup rotation. The recovery window depends on the plan/settings; we do not assert a separately configured portal backup period. Contact us for the current window or a backup-related erasure request. |
Use Account → Delete account to delete a designer account. It removes the live account and linked Google identity and runs cleanup of private project/profile files. A failed cleanup requires follow-up; contact us for erasure confirmation. Separate financial records/invoices, published shop copies, production archives, correspondence and provider backups are not automatically erased by this action.
Recovery copies are for restoration, not routine use after erasure. Where selective deletion is unavailable, the copy expires through hosting rotation. Before using restored personal data, intervening erasure requests must be reapplied. Continued financial or claim-related retention is limited to records needed for that purpose.
7. Cookies, browser storage and security
A session cookie maintains sign-in, protects forms and connects Google sign-in steps. Cookie/server-session lifetimes follow hosting configuration; temporary Google flows have the shorter validity periods above. Blocking required session cookies prevents sign-in and protected account actions.
The editor tour stores a completion preference in browser local storage until you clear it. AI history stays in page memory. External sites such as Google and Shopify apply their own notices when you visit/use them.
We use authentication/access checks, password hashing, form request protection, Google identity verification and encrypted provider connections. Team and provider access is limited to what their roles require. No online service eliminates every security risk.
8. Automated calculations and review
Commission totals/tiers are calculated from sales, refunds and configured rules. The team reviews invoices, corrections and payment records; recording a payment does not initiate a bank transfer. Profile and project approvals are handled by our team. AI help provides information and cannot approve, publish, change or delete projects. Contact us to question a calculation or request human review.
9. Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability and object to legitimate-interest processing. Where a feature relies on consent, you can withdraw it without affecting earlier lawful processing.
Write to info@evolvens.com. We may need proportionate identity verification. We normally respond within one month and explain any legally permitted extension. Erasure does not override a duty to retain a specific record.
You may complain to your competent data protection authority. In Hungary this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH). You may also seek a judicial remedy.
10. Updates
The current notice is at editor.imaginewatch.com/privacy.php, with its effective date. We will bring material changes affecting your use of the service to your attention through the portal or a service email.