Privacy Policy

1. Information We Collect

We collect information necessary to provide and continuously improve our visual diagramming and system design generation platform. The types of data we collect include:

• Account Credentials: Name, email address, profile picture, authentication tokens, and account preferences when registering via email or single sign-on (SSO) providers.
• Project & Prompt Inputs: System design requirements, text prompts, visual specs, node configurations, and workspace canvas data generated during design sessions.
• Payment & Transaction Data: Subscription tier, order histories, billing address, and transaction metadata. Note: All payment processing and financial data are securely managed by our Merchant of Record, Creem.io. We do not store raw credit card numbers on our servers.
• Technical & Usage Telemetry: IP address, browser type, device descriptors, operating system, session duration, and feature performance metrics.
• Cookies & Local Storage: Essential session cookies and local storage tokens to preserve user preferences and workspace states.

2. How We Use Your Information

We process personal data only for legitimate business and operational purposes, including:

• Generating and rendering architectural diagrams, visual workflows, and code artifacts requested by users.
• Authenticating account access and securing user workspaces.
• Managing billing subscriptions, processing order renewals, and issuing transactional notifications via Creem.io.
• Monitoring platform stability, performance optimizations, and preventing unauthorized access or API abuse.
• Providing responsive customer support and addressing technical inquiries within 3 business days.

3. AI Model Data Privacy & Processing

dezign2app utilizes state-of-the-art Artificial Intelligence (AI) foundation models to transform user descriptions into system diagrams and functional application blueprints. Regarding AI data handling:

• API Processing: User prompts and architectural specifications are transmitted securely via API connections to LLM providers (such as OpenAI, Anthropic, or Google) solely to generate requested visual and code outputs.
• No Model Training: Your private prompts, proprietary architecture specs, and generated design assets are NOT used to train public foundation AI models.
• Independent Branding Disclaimer: dezign2app is an independent application platform and interface. dezign2app is not affiliated with, sponsored by, or endorsed by Google, OpenAI, Anthropic, or any third-party AI model creators. Third-party model names referenced in documentation denote functional API integrations only.

4. Third-Party Service Providers & Merchant of Record

We share data with trusted third-party vendors under strict data protection agreements:

• Creem.io (Merchant of Record): Creem.io is our Merchant of Record and reseller. Creem processes payments, manages billing subscriptions, calculates applicable taxes, and sends official receipts.
• Clerk: Provides secure user authentication and session token management.
• Cloud Infrastructure Providers: Hosting, serverless computing, and database services provided by Vercel and cloud database partners using encrypted channels.

5. Data Security & Storage Controls

We enforce robust technical and organizational security controls to protect user data from unauthorized access, loss, or disclosure:

• Encryption in transit using TLS 1.3 protocols and encryption at rest (AES-256) for stored data.
• Strict role-based access control (RBAC) restricting server access exclusively to authorized personnel.
• Automated system monitoring and periodic security audits.

6. Your Data Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess the following rights regarding your personal data:

• Access & Export: Request a full copy of your personal data and project records.
• Rectification: Correct inaccurate or incomplete account details.
• Erasure & Deletion: Request permanent deletion of your account, workspace assets, and telemetry records.
• Opt-Out: Opt out of non-essential product update communications.

To exercise any of these rights, email us at founder@dezign2app.com.

7. Children's Privacy

dezign2app is not directed at or intended for use by children under the age of 16 (or 13 in certain jurisdictions). We do not knowingly collect personal data from children. If we discover a minor has registered without verifiable parental consent, we will promptly purge the account.

8. Contact Us

If you have questions, concerns, or data privacy requests regarding this Privacy Policy, please contact our support team: