privacy-2026-09-08
Privacy Policy
This policy explains how the IdeaDesign team processes data and how you can manage analytics preferences, export data, and delete your account.
Data We Process
We process account email, username, avatar initial, login method, registration and login times, credit ledger entries, privacy preferences, policy acceptance records, feedback, uploaded images, webpage URLs, analysis history, public sharing state, model configuration metadata, and encrypted custom API keys.
Purposes
We use this data to create accounts, verify email, provide AI analysis, save history, charge and refund credits, show public work, sync settings, troubleshoot issues, prevent abuse, improve the product, and fulfill export or deletion requests.
AI And Third Parties
Images, webpage screenshots, URLs, prompts, and needed context may be sent to Gemini or the custom model provider you configure. Infrastructure and tools may include PostgreSQL, Railway, Vercel, Supabase/R2, local file storage, Resend/SMTP, GitHub/Google OAuth, Sentry, Amplitude, Mixpanel, and session replay.
Analytics And Replay
Under the current strategy, Amplitude, Mixpanel, and session replay are enabled by default to understand feature use, conversion, and error paths. You can turn them off in settings. Browser GPC or DNT signals are treated as analytics and replay opt-out. Replay masks sensitive inputs and should not record API keys, passwords, or full image content.
Public Sharing
Your analyses are private by default. When you create a share link or publish an analysis, titles, images, colors, tags, prompts, and analysis summaries may be accessible or displayed. Public status and share links are disabled immediately after an account deletion request.
Retention
Verification codes are kept for up to 24 hours. Analysis jobs are kept for 90 days by default. Anonymized credit and security audit records may be kept for up to 24 months. Backup residue may remain for up to 30 days. Account deletion has a 30-day restore window before deletion or anonymization.
Your Rights
You can access and correct account information, turn off analytics and session replay, export account, history, credit, and acceptance records as JSON, and request account deletion. Exports do not include passwords, tokens, or decrypted API keys.
Security
We hash passwords, encrypt custom API keys, avoid logging API keys, image content, or full analysis text, and use request IDs for troubleshooting. No internet service can be guaranteed perfectly secure.
Minors
The product is not intended for unsupervised use by minors. Minors should use it only with guardian consent and supervision.
Contact And Updates
For privacy questions, contact hello@ideadesign.ai. Major updates will require acceptance of the current version; if you do not agree, you may still export data, request deletion, or log out.