Privacy Policy

Introduction & scope

This Privacy Policy applies to the IMMI website (immiphoto.xyz), the IMMI hardware device, its pre-installed software, and any companion applications. It is operated by IMMI ("we," "us," "our"). This policy does not cover third-party websites or services that link to us.

Information we collect

During preorder (today):

• Email address you submit to our waitlist
• Aggregate website analytics (page views, referrer, device type, broad geography) via Meta Pixel and, where enabled, Microsoft Clarity or Google Analytics
• IP address, transiently, for abuse prevention — not linked to your account

After launch (when you place an order):

• Name and shipping address, to ship your device
• Payment details, processed by our payment provider — we never see or store full card numbers
• Optional device telemetry (firmware version, hardware health, error logs) — opt-in and can be disabled at any time

We do not collect:

• Your photos — ever
• Account logins to our servers — there is no IMMI account to create
• Location data beyond what's needed to ship the device
• Contact lists, browsing history, or anything beyond what's listed above

What stays on your device

This is the most important section.

On your IMMI device:

• All photos, videos, and file metadata
• All AI-generated search tags and indexes
• All family/team member profiles, shared albums, and permissions
• Your preferences and settings

Your IMMI device does not transmit your photos or personal files to us, or to any third party. This isn't a policy we wrote — it's a property of how the hardware is designed. We cannot access your device remotely.

What we never do

• We don't sell your personal data. We never have, and never will.
• We don't train AI models on your photos, files, or any content you create.
• We don't share your email address with advertisers or data brokers.
• We don't track you across other websites using our own data.

How we use your email

We use your waitlist email only to:

• Send product updates (approximately one email per month)
• Notify you when IMMI is ready to preorder
• Respond to support messages you initiate

You can unsubscribe at any time via the link at the bottom of any email, or by contacting privacy@immiphoto.xyz.

Cookies & website analytics

Our website uses:

• Meta Pixel — tracks ad conversion for our Meta (Facebook / Instagram) campaigns
• Microsoft Clarity — anonymized session replay and heatmaps, used to improve UX
• Google Analytics (if enabled) — aggregate traffic measurement

You can disable these via your browser's cookie settings or by enabling "Do Not Track." If you're in the EEA/UK, our site will request consent before loading these trackers.

Who we share data with

We share data only with the following parties, and only for the purpose listed:

• Payment processor (e.g., Stripe) — to process purchases after launch
• Shipping carriers — to deliver your hardware
• Email service provider — to send waitlist and order notifications
• Website hosting & analytics providers — for site operation
• Legal compliance — only if required by law, subpoena, or court order

Data retention & deletion

• On-device data — stored indefinitely on your IMMI device until you delete it. A factory reset erases everything.
• Waitlist emails — kept until you unsubscribe or request deletion.
• Order & account data — retained for the period required by tax and consumer-protection law (typically 7 years in the U.S. / EU).
• Anonymized website analytics — aggregated; individual-visitor data is not retained beyond 90 days.

Security

All connections to our website use HTTPS (TLS 1.3). Email addresses are stored encrypted at rest with our email provider. Your IMMI device sits on your network, behind your firewall, under your physical control — we cannot access it.

Children's privacy

IMMI is not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child has submitted information to us, contact privacy@immiphoto.xyz and we will delete it.

Your rights

Depending on your jurisdiction, you have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent for non-essential data processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@immiphoto.xyz.

California (CCPA / CPRA)

If you are a California resident, you have additional rights including the right to know what personal data we collect, request deletion, and opt out of data sales. We do not sell personal data. For requests, email privacy@immiphoto.xyz.

EEA / UK (GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: contract performance (order fulfillment), legitimate interest (product improvement via anonymized analytics), and consent (marketing emails). You may contact our data protection contact at privacy@immiphoto.xyz.

International data transfers

Your photos stay on your device — no international transfer. Website and email data may be processed in the United States and other jurisdictions where our service providers operate. Where required, we rely on Standard Contractual Clauses for cross-border transfers.

Changes to this policy

We will notify you of material changes via email and a notice on this page at least 30 days before they take effect. Minor edits (typos, clarifications) may be made without notice.

Contact

All privacy inquiries: privacy@immiphoto.xyz