Privacy Policy
Our commitment to protecting your data and respecting your privacy rights.
Quick Navigation
1. Introduction
VectorAI ("we," "our," or "us") operates vectorai.cc (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered bitmap-to-vector conversion service.
By using VectorAI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Personal Information
- Account Data: Email address, password (hashed), subscription status
- OAuth Data (Google Sign-In): If you sign in with Google, we receive your email address and profile information (name, profile picture) as permitted by your Google account settings. We do not access your Google Drive, Gmail, or other Google services without explicit additional consent.
- Payment Information: Processed by Stripe (we do not store full payment card details)
- Profile Data: Credits balance, subscription tier, account creation date
2.2 Image Data
- Uploaded Images: Raster images you submit for vectorization
- Processing Metadata: File size, format, processing timestamps, job status
- Output Files: SVG files generated from your uploads
2.3 Technical Data
- Usage Analytics: Pages visited, features used, conversion statistics
- Device Information: Browser type, operating system, IP address, user agent
- Cookies: Session tokens, authentication credentials, preference settings
- OAuth Tokens: If you use Google Sign-In, we store OAuth access tokens securely to maintain your session. These tokens are encrypted and only used for authentication purposes.
3. How We Use Your Information
✓ Service Delivery
- • Process image vectorization requests using our AI engine
- • Manage your account, credits, and subscription status
- • Authenticate and authorize access (including via Google OAuth)
- • Generate processing logs for service quality monitoring
✓ Payment Processing
- • Process subscription payments via Stripe
- • Verify checkout sessions and update account status
- • Handle refunds and billing disputes
✓ Analytics & Improvement
- • Analyze usage patterns to improve our AI model and UI
- • Monitor system performance and error rates
- • Conduct A/B testing for feature optimization
4. Image Processing & Retention
🔒 Your Images Are Private
- • Processing: Images are temporarily stored in Supabase Storage during AI processing
- • Automatic Deletion: Input images are deleted 24 hours after upload
- • Output SVGs: Available for 24 hours after generation
- • Processing Logs: Retained for 90 days for quality monitoring, then automatically deleted
We do not store your images long-term. Our database includes automatic cleanup mechanisms to ensure GDPR compliance.
5. Third-Party Services (Data Processors)
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, auth, file storage | United States |
| Modal Labs | AI processing (GPU) | United States |
| Stripe | Payment processing | US, EU |
| Google OAuth | Authentication (optional) | US, EU |
All third-party processors are bound by Data Processing Agreements (DPAs) and comply with GDPR requirements.
6. Your Rights Under GDPR
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your account and data
Right to Data Portability
Receive your data in machine-readable format
Right to Object
Object to processing based on legitimate interest
Right to Restrict
Request temporary suspension of data processing
To exercise your rights:
Email us at info@vectorai.cc
We will respond within 30 days as required by GDPR.
7. Google OAuth Disclosure
Limited Use Requirements
VectorAI's use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.
✓ What We Access
- • Email address (for account creation)
- • Basic profile info (name, profile picture)
✗ What We Do NOT Access
- • Gmail messages or contacts
- • Google Drive files
- • Google Calendar events
- • YouTube data
- • Any other Google services
Revoking Access
You can revoke VectorAI's access to your Google account at any time:
- Visit Google Account Permissions
- Find "VectorAI" in the list
- Click "Remove Access"
8. Contact Information
Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.