Ideogram Data Lifecycle

Ideogram Data Lifecycle

Overview

Map and enforce the lifecycle of every datum that crosses an Ideogram workflow. Distinguish prompts, JSON descriptions, source media, masks, generated outputs, temporary links, safety decisions, metadata, logs, and custom-training assets because each has different ownership and retention needs.

Prerequisites

• Use case, data owner, tenant, classification, rights basis, region, retention, and deletion SLO.
• Architecture for upload, API, async state, webhook, polling, download, storage, review, publication, backup, and telemetry.
• Vendor terms and privacy review appropriate to the workload.

Current Contract

V4 describe can transform an uploaded image into a structured json_prompt; its bounding boxes use normalized [0,1000] coordinates in [y_min,x_min,y_max,x_max] order. Output URLs expire. Custom training supports datasets of 10–100 images, optional captions or ZIP upload, model training, and model-status retrieval.

Authentication

Keep IDEOGRAM_API_KEY outside data stores and send it only as Api-Key from a trusted server. Application authorization must bind every input, generated object, dataset, and trained-model reference to its tenant and purpose.

Instructions

1. Inventory each data class, source, purpose, rights basis, vendor transmission, destination, readers, retention, and deletion path.
2. Minimize prompts and metadata, validate image type and size, strip unnecessary metadata, and isolate temporary files.
3. Store async identifiers and safety decisions without copying content into queues, logs, traces, or incident evidence.
4. Download approved output promptly, validate it, store under an opaque tenant-scoped key, and discard the vendor URL.
5. Apply separate governance to describe output, captions, datasets, ZIPs, custom model references, backups, and derived assets.
6. Enforce access, encryption, publication review, lifecycle deletion, legal holds, and tenant export.
7. Test deletion across primary storage, metadata, queue, cache, backup policy, and custom-training records.

Tool Discipline

Use Read, Glob, and Grep to inspect schemas, stores, policies, and fixtures. Use Write and Edit for approved lifecycle controls or documentation. Do not open, copy, upload, publish, or delete customer media without authority.

Approval Boundaries

Require data-owner approval for sensitive inputs, training, new purposes, longer retention, external publication, cross-region movement, backup exceptions, and destructive deletion. Rights uncertainty is a stop condition.

Error Handling