Privacy Policy

1. Overview

Welcome to VectoTrace. We respect the confidentiality of your artwork and personal data. This Privacy Policy explains what information we collect when you use VectoTrace to convert raster images into scalable vector graphics (SVG), how we process that information, and the choices you have.

2. Stateless Zero-Retention Artwork Processing

Unlike traditional cloud design platforms, VectoTrace operates a stateless image conversion pipeline:

• When you upload a PNG, JPG, or WEBP file (up to 10 MB), the image bytes are held transiently in memory solely for the duration of the vector conversion request.
• Once the resulting SVG paths are streamed back to your browser, VectoTrace does not store copies of your uploaded raster image or generated SVG file in any permanent database or cloud storage bucket.
• We never use your uploaded client logos, illustrations, or artwork to train machine learning models or share them with public galleries.

3. Information We Collect

We collect only the minimum data required to authenticate your account, maintain your credit balance, and prevent automated abuse:

• Account Information: When you register for VectoTrace (via email/password or Google OAuth), we store your email address, unique user identifier, and account creation timestamp via Supabase Auth.
• Credit & Usage Telemetry: To manage your 5 free signup credits and any purchased credit packs, we record technical metadata for each conversion request (file name, file size in bytes, processing duration in milliseconds, and conversion status: succeeded or refunded).
• Payment & Billing Records: When you purchase a credit pack, checkout is processed by our Merchant of Record (such as LemonSqueezy or Polar.sh). VectoTrace never sees or stores your raw credit card numbers. We receive only a webhook confirmation containing the order ID, pack type, amount paid, and your user ID so we can credit your balance.

4. Cookies & Session Storage

VectoTrace uses strictly necessary HTTP-only authentication cookies to keep you signed into your studio session. We do not use third-party behavioral advertising cookies or cross-site tracking pixels.

5. Third-Party Infrastructure Providers

To deliver a fast and reliable service, we rely on vetted infrastructure sub-processors:

• Supabase: Provides encrypted user authentication and PostgreSQL database hosting for your credit ledger.
• AI Vectorization Compute Engine: Processes the transient raster-to-vector mathematical conversion over an encrypted TLS connection.
• LemonSqueezy / Polar.sh: Handles global payment processing, tax compliance, and invoicing for credit pack purchases.

6. Your Data Rights & Account Deletion

You have the right to access, export, or request permanent deletion of your VectoTrace account and associated transaction logs at any time. To request account deletion, email us from your registered address at hello@vectotrace.com, and we will purge your profile within 7 business days.

7. Contact Us

If you have any questions regarding this Privacy Policy or how VectoTrace protects your data, please contact us at hello@vectotrace.com.