Privacy Policy

Last updated: June 27, 2026

Three things matter most:

  • What you paste goes to Google Gemini to generate your infographic. We store it so you can come back to it.
  • We don't train any AI model on your content. Not ours, not anyone else's.
  • Delete your account, and your data is really gone — except for your email address, which we keep to prevent abuse of free credits.

The full policy below covers the details. If anything is unclear, email us at support@infographicai.xyz.

Who We Are

infographicAI is built and operated by XD and bindy, a two-person team. Throughout this policy, "we", "us", and "our" refers to the makers of infographicAI. "You" means the person using our service.

Information We Collect

Account information

  • Email address (required to create an account)
  • Sign-in method (whether you use email magic link or Google sign-in). We do not store passwords. Our service supports two ways to sign in: (1) we email you a sign-in link that you click to log in, or (2) you sign in with Google. In neither case do we collect or store a password.

Content you create

  • Text or URLs you paste as input
  • Infographics you generate
  • Refine instructions you provide
  • Style choices you make

Usage data

  • Pages you visit, buttons you click, features you use
  • Generation and edit activity (timestamps, success or failure)
  • We use this to understand how the product is used and to improve it

Technical data

  • Browser type, operating system, device type
  • Approximate location (country and city), derived by Google Analytics from your IP address. We do not store your IP address ourselves
  • Cookies (see Cookies and Tracking below)

What we do NOT collect

  • Credit card numbers, bank details, or any payment information. All payments are processed by Creem, our payment provider. We see only that a payment succeeded — never your card details.

How We Use Your Information

We use the data we collect only for these purposes:

  • To provide the service — generating, refining, storing, and delivering your infographics
  • To prevent abuse — specifically, to prevent the same person from repeatedly creating new accounts to claim free credits
  • To improve the product — based on aggregated behavior data (clicks, feature usage), not on the content of what you paste
  • To support you — responding to your emails and troubleshooting issues
  • To comply with the law — when we are legally required to disclose information

We do not sell your data. We do not share your content with advertisers. We do not use your inputs or outputs to train any AI model.

Third-Party Services

To operate infographicAI, we rely on a small number of trusted services. Here is exactly who receives what.

Google Gemini (AI generation) The text or URL content you paste is sent to Google's Gemini API to generate your infographic. Google processes this input under their API terms, which prohibit using API data to train Google's models. See Google's API terms at https://ai.google.dev/gemini-api/terms.

Creem (payment processing) When you subscribe or purchase credits, Creem handles the entire transaction. They collect and store your payment information directly. See Creem's privacy policy at https://www.creem.io/privacy. We see only the outcome (paid or failed) and your subscription status.

Creem may require us in the future to integrate their Moderation API, which screens text inputs against content policies before AI generation. If we integrate this service, we will update this policy and notify registered users by email before the change takes effect.

Google Tag Manager (tag management) We use Google Tag Manager to load and manage our analytics tags. Tag Manager is a container that loads other tools according to your consent choice; it does not itself set cookies or collect personal data, and it never receives the content you paste. See https://policies.google.com/privacy.

Google Analytics (traffic analytics) We use Google Analytics to understand which pages people visit and how they navigate the site. This service uses cookies, which are set only after you consent (see Cookies and Tracking below). Google Analytics uses your IP address to determine your approximate country and city, but we only see the country- and city-level information in our analytics dashboard — we never see or store your IP address ourselves. Google Analytics also receives your browser type and the pages you view. It never receives the content you paste. See https://policies.google.com/privacy.

Cloudflare (hosting infrastructure) Cloudflare hosts our website and application. As part of standard internet hosting, Cloudflare processes traffic data — including IP addresses and request logs — to deliver the site to you and protect against attacks. This processing happens at the infrastructure layer; we do not access or store IP addresses ourselves. As described below, Cloudflare also handles our incoming email routing.

Cloudflare Email Routing (transactional and support email) We use Cloudflare's Email Routing service to receive and reply to emails sent to our support address. When you email us, your message and email address are processed by Cloudflare as part of email delivery. See https://www.cloudflare.com/privacypolicy/.

Data Retention

We keep your data for different lengths of time depending on what it is.

While your account is active, the infographics you generate and the content you paste are kept indefinitely so you can access them whenever you log in.

When you delete your account, all that data is permanently removed from our servers — your generated infographics, your inputs, your activity logs, and your account profile.

There is one exception: we retain your email address, in plain text, after account deletion. We do this to prevent users from repeatedly creating new accounts to claim free credits. We keep only the email address — no other identifying information, no content, no activity history. We disclose this practice openly rather than hiding it: we believe preventing free-tier abuse is a legitimate need, and we want you to know exactly what we keep.

If you object to this retention, email us at support@infographicai.xyz and we will remove the email address. After we do so, the same email may be used again to claim free credits, which we may no longer be able to prevent.

When you choose to share an infographic publicly, a public URL is generated. When you cancel sharing, the public URL becomes inaccessible immediately. However, anyone who viewed or saved your infographic before you canceled sharing may retain their own copy — this is outside our control.

We retain records of payment transactions (amount, date, customer ID — never card details) for as long as required by tax law in the relevant jurisdictions, typically 5 to 7 years.

Your Rights

You have these rights regarding your data:

  • Access — request a copy of the data we hold about you
  • Correction — update inaccurate information
  • Deletion — delete your account and your data (subject to the email retention exception above)
  • Export — download your generated infographics
  • Object — tell us to stop processing your data (note: this may mean we can no longer provide the service)

To exercise any of these rights, email support@infographicai.xyz. We respond to data requests within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect, and the right to non-discrimination if you exercise these rights. Email us to make a CCPA request.

Cookies and Tracking

We use cookies for two purposes:

  • Essential cookies — required to keep you logged in and operate the service. These cannot be disabled without breaking the product.
  • Analytics cookies — set by Google Analytics to measure usage patterns.

Analytics cookies require your consent. The first time you visit, a cookie banner asks whether to allow analytics. Until you choose Accept, analytics run under Google Consent Mode and no analytics cookies are stored on your device. If you choose Decline, analytics cookies stay off. Your choice is saved on this device; to change it later, clear this site's data in your browser and the banner will appear again.

We do not use cookies for advertising or remarketing.

Security

We use standard security practices:

  • All connections to our service use HTTPS encryption
  • We use passwordless sign-in — either an email magic link or Google sign-in. We do not store any passwords, so there is no password for an attacker to steal or for us to leak
  • Access to our database is restricted to XD and bindy, the two of us

No system is 100% secure. If we ever discover a data breach affecting your personal information, we will notify you promptly.

Children's Privacy

infographicAI is not intended for users under 13 years of age. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, email support@infographicai.xyz and we will delete it.

International Users

infographicAI is currently operated as a small independent project and made available globally. By using our service, you acknowledge that your data may be processed in countries different from your own, including the United States, where some of our infrastructure providers are located.

Changes to This Policy

When we make material changes to this policy, we will:

  • Update the "Last updated" date at the top
  • Send an email to registered users for significant changes
  • Keep the policy available at this URL

Your continued use of infographicAI after changes take effect means you accept the updated policy.

Contact

For any privacy questions, requests, or concerns:

Email: support@infographicai.xyz

Response time: 5 business days for general inquiries; 30 days for formal data requests