What we collect, and what we don't

01Who we are

VectorEase is operated by Dan Deigan, a sole proprietor based in Erin, Ontario, Canada. The Service is available at vectorease.com (the marketing site) and app.vectorease.com (the application).

For any privacy questions, use the contact form at the bottom of this page.

02What we collect

We collect the minimum amount of information needed to run the Service:

• Account info: your email address, name (if provided), account creation date, and last login timestamp
• Vectorization counter: how many of your 5 free vectorizations you've used, and whether you've upgraded to lifetime access
• Payment info: processed entirely by Stripe — we receive a confirmation that payment succeeded but never see your card number, CVV, or billing address
• Communications: the contents of any message you send us through the contact form, plus chat transcripts if you use the support widget
• Email marketing preferences: if you opted into the email list at signup, your subscription status with Brevo (you can unsubscribe anytime via the link in any email)
• Server logs: standard web server logs including IP address, browser type, referrer, and access timestamps — used for security and debugging

03What we don't collect

This is the part we want to be clear about:

• Your images. Period. All vectorization happens client-side, in your browser. Your uploaded images never reach our servers. We can't see them, log them, store them, or train any model on them.
• Your output files. Same reason — the SVG, DXF, and .lbrn2 files are generated in your browser. We never see them.
• Your payment card details. Stripe handles all payment data. We receive a yes/no confirmation and a Stripe customer ID.
• Browsing history outside our domain. We don't track you across the web.
• Precise location data. We use IP for security only, not for marketing or location tracking.

04How we use it

We use the data we collect to:

• Run your account and authenticate your logins
• Process your payment for lifetime access and verify your license status
• Send you transactional emails (account creation, payment receipts, upgrade confirmations)
• Send you marketing emails about VectorEase, but only if you explicitly opted in at signup (you can opt out anytime)
• Provide support when you reach out via the contact form or chat widget
• Improve the product using aggregated, anonymized usage stats (no individual data)
• Detect abuse, fraud, and security issues
• Comply with legal obligations if required by law

05Third-party services we use

We rely on a small set of trusted vendors to run the Service. Each has its own privacy policy and security practices:

We use these vendors as data processors acting on our behalf. We do not allow them to use your data for their own marketing.

06Cookies and tracking

We use the minimum cookies needed for the Service to function:

• Authentication cookies so you stay logged in across sessions
• Functional cookies that remember settings like your preferred quality preset

We don't use third-party advertising trackers. We don't run Google Ads pixels, Facebook pixels, or marketing cookies. No retargeting.

If we add analytics in the future (for example, anonymized Vercel Analytics or Plausible), we'll update this page and you'll see it disclosed here.

07Data sharing

We do not sell, rent, trade, or share your personal data with third parties for their marketing purposes. Period.

The only times we share data are:

• With the vendors listed above (as data processors, to run the Service)
• If required by law, court order, or valid legal process
• To protect against fraud, abuse, or threats to the Service or its users
• If the business is ever sold or transferred (you'd be notified in advance)

08Security

We use standard security practices to protect your account data:

• All data in transit is encrypted with TLS (HTTPS)
• Passwords are hashed and salted by Firebase Authentication
• Payment data never touches our servers (handled by Stripe)
• Your uploaded images never touch our servers (client-side processing)
• Access to account data is restricted to Dan only

No system is 100% secure, but we work hard to protect what little data we hold. If we ever experience a data breach affecting your information, we'll notify you within 72 hours per applicable law.

09Your rights

Depending on where you live, you may have rights under PIPEDA (Canada), GDPR (EU/UK), CCPA (California), or other privacy laws. We honour all of them, regardless of where you're located:

• Right to access: request a copy of the personal data we hold about you
• Right to correct: ask us to fix inaccurate information
• Right to delete: ask us to delete your account and personal data
• Right to portability: request your data in a portable format
• Right to opt out: unsubscribe from marketing emails anytime via the link in any email
• Right to object: object to any processing you believe is unjustified

To exercise any of these rights, use the contact form at the bottom of this page. We'll respond within 30 days.

10Data retention

We keep your account data as long as your account is active. If you delete your account or ask us to delete it, we remove your personal information from our active systems within 7 business days.

Some data may be retained longer for legitimate reasons:

• Payment records: kept by Stripe for 7 years to comply with tax and accounting laws
• Server logs: retained for 90 days for security purposes
• Support communications: kept for up to 2 years for reference

11Children's privacy

VectorEase is not intended for users under 18. We don't knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us through the form below and we'll remove it.

12International users

VectorEase is operated from Canada. By using the Service, you understand that your data may be processed in Canada, the United States (Vercel and Stripe), and other countries our vendors operate in. We rely on standard contractual clauses and equivalent safeguards for international data transfers under GDPR.

13Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your account address, with a minimum 14 days notice. The "Last updated" date at the top reflects the most recent version.