Account and security
Sign in
Section titled “Sign in”The default login is your username and password. Magic links are used for registration and recovery, not as the everyday login method.
If you have enabled MFA, you will be asked for your passkey or authenticator code after the password step.
Password
Section titled “Password”Passwords are 10–128 characters and must include at least one uppercase letter and one digit. Changing your password signs out your other sessions.
You can use one active MFA method:
- a passkey
- a TOTP authenticator app
TOTP secrets are encrypted at rest. If you lose your MFA method, use the recovery instructions on the sign-in screen or contact support.
Admin access
Section titled “Admin access”Admin access is separate from a normal account. Admin pages require a verified WebAuthn passkey after login. Admin access to a private asset is audited.
Billing profile
Section titled “Billing profile”Your company name, VAT ID, contact, address and billing email can be stored in your profile and synced to Stripe. Checkout uses the saved customer details so invoices show the right information.
Data requests
Section titled “Data requests”For a copy of your data or a deletion request, email privacy@imaginum.studio. We verify the identity of the requester before acting.
Delete my account
Section titled “Delete my account”You can delete your account from Profile → Delete my account. Deletion is irreversible. It immediately cancels an active subscription without an automatic refund and removes your profile, private media and other account data.
We keep only what is required for accounting and tax, legal claims, abuse and illegal-content handling, security auditing and backups. Some billing records may be kept in pseudonymised form for the statutory period, and backups may remain until rotation. See the privacy policy for the details.