Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use InfoAIgraphic (the "Service"). It applies worldwide.

Account & Billing

• Email address.
• Payment data processed by Stripe (billing details, card tokens/identifiers). We do not store full card numbers.

Content & Usage

• Prompts, inputs, uploaded assets (e.g., logos), and generated infographics.
• Event telemetry such as user-agent and device identifiers; our hosting/CDN providers may process network information (e.g., IP addresses) for security and delivery.

Analytics

• Vercel Web Analytics provides anonymous, aggregated page-view statistics without cookies. Its daily visitor identifier cannot follow a visitor across days or websites.
• Google Analytics 4 (GA4) loads on visits to the Service and may use first-party cookies or similar identifiers to distinguish users and sessions.
• Vercel Speed Insights collects performance measurements that help us monitor the reliability and responsiveness of the Service.

We do not intentionally collect sensitive categories unless you include them in your prompts or uploads. Please avoid providing personal data in prompts unless necessary.

• Provide and operate the Service; perform contract with you.
• Process payments and fraud prevention; legitimate interests and legal obligations.
• Measure page usage and performance to improve the Service; legitimate interests or another applicable legal basis depending on your jurisdiction.
• Security, abuse prevention, and compliance; legitimate interests and legal obligations.
• Communications (service notices, updates); legitimate interests/contract.

We send prompts/inputs to AI providers to generate outputs.

No training: We do not permit our providers to use your prompts or outputs to train their models, where such controls exist.

We configure providers to minimize retention and disable logging where feasible.

We share personal data with:

• Infrastructure & processing: Vercel (hosting/CDN), Supabase (database, auth), cloud storage, backup vendors.
• Payments: Stripe (payment processing, taxes).
• Analytics: Vercel Web Analytics, Vercel Speed Insights, and Google Analytics 4.
• Compliance: government authorities or third parties when required by law or to protect rights and safety.

We do not "sell" personal information. For California and similar laws, we may "share" personal information for cross-context behavioral advertising; you can opt out (Section 9).

We operate globally; data may be processed outside your country (e.g., the EU/UK ↔ US).

For EU/EEA data, we rely on the European Commission's Standard Contractual Clauses (SCCs) with our vendors and subprocessors. For UK data, we use the UK IDTA or UK Addendum to the SCCs. We also implement supplementary measures and conduct transfer assessments as appropriate.

• User Content (prompts, uploads, outputs): retained for 12 months to support your account history and features, then deleted or anonymized unless we must keep it longer to comply with law or resolve disputes.
• Telemetry/logs: retained for up to 12 months unless a shorter technical TTL applies.
• Billing records: retained per tax and accounting laws.

We use reasonable administrative, technical, and organizational measures appropriate to the risk (e.g., encryption in transit, access controls). No method is 100% secure.

EEA/UK: rights of access, rectification, erasure, restriction, portability, objection; and the right to withdraw consent.

US (e.g., CA, CO, CT, VA, UT, etc.): rights to know/access, delete, correct, opt out of sale/sharing/targeted advertising. In California we provide:

• "Do Not Sell or Share My Personal Information" link (or equivalent Privacy Choices) and we honor Global Privacy Control (GPC) signals.
• Sensitive data limits as required by CPRA.

To exercise rights or appeal a decision, contact contact@infoaigraphic.com. We respond within 30 days (extendable where permitted).

Vercel Web Analytics records anonymous, aggregated page views without cookies. It does not receive tool inputs, transcript content, account identifiers, or payment information from our implementation.

GA4 and Vercel Speed Insights load automatically when you visit the Service. GA4 may set first-party analytics cookies and process device, browser, page, and session information. Our GA4 configuration enables IP anonymization and does not enable advertising storage, advertising user data, or advertising personalization.

You can restrict or delete cookies using your browser settings. You may also contact us using the address in Section 15 to exercise privacy rights available in your jurisdiction.

The Service is not directed to children under 13 (or 16 in the EEA/UK where consent rules apply). We do not knowingly collect data from such users; if we learn of it, we will delete it.

• Hosting/CDN: Vercel (global)
• Database/Auth: Supabase
• Payments & tax calc: Stripe
• Analytics and performance: Vercel Web Analytics, Vercel Speed Insights, and Google Analytics 4

We may update this list as our stack evolves. For material changes, we will notify you by email.

The Service may link to third-party sites. Their privacy practices are outside our control.

We may update this Policy. For material changes, we will notify you by email before the new version takes effect.

Questions or requests: contact@infoaigraphic.com