Data We Collect

We collect only the data needed to run the product:

• Account data: name, email, email verification status, optional profile image.
• Session/auth data: session token/expiry and session metadata saved by our auth provider (for example IP address and user agent when available), plus Google OAuth account data if you use Google sign-in.
• Generation data: prompt text, chosen aspect ratio/size, generation status, timestamps, provider prediction ID, and generated SVG storage key.
• Credits/purchase records: credit ledger entries (amount, type, source, reference IDs such as Stripe session ID).
• Verification data: email OTP verification records needed for login.

Data We Do Not Collect

We do not store full payment card numbers on our servers. We also do not run third-party advertising trackers on the site.

Payments

Payments are processed by Stripe. We do not store full payment card details. When creating checkout sessions we send Stripe data such as your email, selected pack, and internal user/session references so payment can be completed and credits can be granted.

How We Use Information

We use this data to authenticate users, send login codes, process purchases, run SVG generations, store and return generated SVGs, maintain credit balances, and protect the service from abuse.

Third-Party Processors We Use

We use third-party providers to operate the service:

• Stripe for payments.
• Replicate for model inference (prompts are sent there).
• Cloudflare R2-compatible object storage for generated SVG files.
• Mailgun for OTP email delivery.
• Google OAuth (optional) for sign-in.

These providers process data on our behalf to deliver the service.

Data Retention

We retain account, generation, and transaction records as needed to operate the product and satisfy legal/accounting requirements. You can request account deletion by emailing support; some records may still be retained where required by law.

Cookies and Sessions

We use essential authentication/session cookies to keep you signed in and secure your account. These are required for login-protected features.

Your Choices

To request account data access or deletion, email us at [email protected].

Security

We use reasonable technical and organizational safeguards. No online system can be guaranteed 100% secure.

Policy Updates

We may update this policy. If we do, we will post the revised version here with a new effective date.