Privacy Policy

1. What we collect

We collect information you provide and information generated when you use the Service.

Account and contact information

When you create an account, we collect information such as your email address, password (stored by our authentication provider in hashed form), and display name. If Google sign-in is available and you use it, we also receive basic profile details provided by Google (such as name and avatar URL). You may also provide preferences such as measurement units.

Billing information

If you purchase a subscription or credit pack, payments are processed by Stripe. We receive and store billing-related records needed to operate your account (for example Stripe customer id, plan or pack purchased, subscription status and credit balances). We do not store your full payment card number on our servers; card details are handled by Stripe.

Projects, uploads and designs

The Service is local-first: design projects may be stored on your device (for example in browser storage such as IndexedDB) and, when you are signed in and cloud sync is available, mirrored to our cloud database and private storage. This can include project settings, design markup, thumbnails, uploaded fonts or textures you choose to store, export and credit history, share links you create, and marketplace listing drafts you generate.

Support and feedback

If you submit a bug report or template feedback, we collect the information you include (such as description, category, optional screenshot, route and device/browser details). Bug reports may include your account email snapshot. You may optionally allow contact and/or include a project snapshot; we do not automatically attach full project or SVG content unless you opt in.

Technical and usage information

Like most websites, we and our service providers may automatically receive technical data such as IP address, browser type, device information, approximate location derived from IP, pages or routes visited, and timestamps, including through hosting and authentication logs needed to operate and secure the Service.

2. How we use information

We use personal information to:

• provide, operate, maintain and improve the Service;
• create and manage accounts, authenticate users and enforce access controls;
• process payments, grant credits and manage subscriptions;
• sync, store and restore your projects and related assets when you use cloud features;
• enable sharing and remix features you choose to use;
• generate marketplace listing text when you use that feature (including sending structured product facts to an AI provider when configured);
• respond to support requests, bug reports and feedback;
• detect, prevent and address fraud, abuse, security issues and Terms violations;
• comply with law and enforce our agreements; and
• communicate with you about the Service (for example account, billing or security messages).

We do not currently operate a marketing newsletter through the Service. If we later offer optional marketing emails, we will ask for consent where required and provide a way to unsubscribe.

3. Consent

When you provide personal information to create an account, complete a purchase, save or sync projects, submit a bug report, or use optional features (such as sharing or AI-assisted listing generation), we treat that as consent to collect and use the information for those purposes. Where we ask for personal information for a secondary purpose (for example optional marketing), we will ask for consent or give you a clear opportunity to decline, as required by applicable law.

You may withdraw consent for ongoing collection, use or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice, by contacting us at everfreedesigns@gmail.com. Withdrawal may limit your ability to use parts of the Service that require that information.

4. When we share information

We do not sell your personal information. We may share information with:

• Service providers who help us run the Service, including hosting, authentication, database and file storage (currently including Supabase and Vercel), payment processing (Stripe), and, when you use AI-assisted listing generation and a provider is configured, AI providers such as OpenAI or Anthropic;
• People you choose to share with, when you create a share link (view or remix) for a project;
• Professional advisors or authorities when required by law, to protect rights and safety, or if you violate our Terms of Service; and
• A successor if Everfree Designs or the Service is involved in a merger, acquisition or asset sale, in which case personal information may be transferred as part of that transaction.

Third-party providers only receive the information needed to perform their services for us, and they have their own privacy practices. Payment card data is handled under Stripe’s privacy and security standards (including PCI-DSS for card processing).

5. Local storage, cookies and similar technologies

We use cookies and similar technologies that are needed to operate the Service, including authentication and session cookies provided through our auth provider. We also use browser storage (such as IndexedDB and localStorage) to keep projects and preferences on your device, including when you use the designer without signing in.

The Service does not currently embed a third-party advertising or analytics pixel as part of the core product. Some pages may use lightweight event hooks that only send data if an analytics script is otherwise present in the environment. If you click outbound affiliate or partner links (for example on Resources), those third-party sites may collect information under their own policies.

6. AI-assisted features

Optional marketplace listing generation may send structured product facts derived from your project and the details you enter to a third-party AI provider (such as OpenAI or Anthropic) when that feature is enabled and configured. Do not include sensitive personal information in listing prompts or fields that you do not want processed by those providers. Design geometry and file export pipelines are otherwise provided as part of the Service and are not described here as third-party generative AI features.

7. International transfers

Everfree Designs is operated from Canada (Ontario). Our service providers may process information in Canada, the United States or other countries. When you use the Service, your information may be transferred to and stored in jurisdictions whose privacy laws differ from those in your province or country. Where required, we take steps appropriate to the circumstances to protect personal information that is transferred.

8. Retention

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes (for example billing records, security logs and dispute resolution). Project data you soft-delete may remain recoverable for a limited period (approximately 30 days) before permanent cleanup. Version history for cloud projects is retained subject to plan-based caps. Local copies on your device remain until you clear browser storage or remove them.

9. Security

We take reasonable precautions and use industry-standard practices appropriate to the sensitivity of the information to help protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. No method of transmission over the Internet or electronic storage is completely secure. Payment card details are processed by Stripe rather than stored on our application servers.

10. Your choices and rights

Depending on applicable law (including Canadian privacy law), you may request access to, correction of, or deletion of personal information we hold about you, or withdraw consent as described above. To make a request, email everfreedesigns@gmail.com. We may need to verify your identity before fulfilling a request, and some information may be retained where we are legally required or permitted to keep it (for example completed transactions).

You can update some account details in the Service, cancel a subscription through billing controls, revoke share links you created, and clear local browser storage for on-device copies. There is not currently a fully automated self-serve account deletion button in the product; contact us and we will handle deletion or closure requests manually.

11. Children

The Service is not directed at children, and we do not knowingly collect personal information from children for the purpose of offering the Service to them. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

12. Third-party sites

The Service may link to third-party websites or services. We are not responsible for their privacy practices. Once you leave our site or interact with a third party, their policies apply.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page unless stated otherwise. If we make material changes, we will note the updated date on this page. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact

For privacy questions, access or correction requests, complaints, or more information, contact Everfree Designs at everfreedesigns@gmail.com.