Privacy Policy

IconCraft AI ("we", "us", "our") operates the iconcraft.ai website and service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

1. Information We Collect

We collect the following types of information:

• Account information: Email address, display name, and profile picture (when signing in via OAuth providers)
• Payment information: Processed and stored by Stripe (our payment processor). We do not store your credit card details, bank account numbers, or other financial information on our servers
• Generation history: The text prompts you submit, style and color preferences selected, and the icons generated for your account
• Usage data: Credit balance, purchase history, and generation counts
• Cookies: Language preference and authentication session tokens (see Section 6)

2. How We Use Your Information

• Account management: To create and maintain your account, authenticate your identity, and manage your credit balance
• Service delivery: To process your icon generation requests, store your generated icons, and provide download access
• Communication: To send transactional emails (purchase confirmations, account notifications) and respond to support requests
• Service improvement: To understand usage patterns and improve the quality of our Service

3. AI Processing

When you generate icons, your text prompts and selected parameters are sent to third-party AI providers (OpenRouter / OpenAI) for image generation. These providers process your prompts to generate icon images. We recommend not including personal or sensitive information in your prompts. Please refer to the respective privacy policies of these providers for information on how they handle data.

4. Payment Data

All payment processing is handled by Stripe (stripe.com). Stripe collects and processes your payment information directly. We receive only transaction confirmations, including the credit pack purchased and transaction ID. We never have access to your full credit card number or payment credentials. For details on how Stripe handles your payment data, please review Stripe's Privacy Policy.

5. Authentication

We use Supabase Auth for user authentication. You may sign in using email and password, or through third-party OAuth providers (Google, GitHub). When using OAuth, we receive your basic profile information (name, email, profile picture) from the provider. We do not receive or store your OAuth provider passwords.

6. Cookies

We use the following cookies:

• Authentication session: Essential cookies to maintain your logged-in session
• Language preference: Stores your selected language (English or Chinese)

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

7. Data Retention

We retain your account information and generation history for as long as your account is active. Generated icon images are stored in cloud storage and remain accessible through your account. If you delete your account, we will delete your personal information and generation history within 30 days, except where we are required by law to retain certain data.

8. Third-Party Services

We use the following third-party services to operate IconCraft AI:

• Stripe: Payment processing and billing
• Supabase: Database hosting, user authentication, and file storage
• OpenRouter / OpenAI: AI model providers for icon generation
• Vercel: Website hosting and content delivery
• Sentry: Error monitoring and performance tracking

Each of these services has their own privacy policies governing how they handle data.

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Deletion: Request deletion of your account and associated personal data
• Export: Download your generated icons and request an export of your account data
• Correction: Request correction of inaccurate personal data

To exercise any of these rights, please contact us at support@iconcraft.ai. We will respond to your request within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@iconcraft.ai.