DRAFT — Pending attorney review. Bracketed fields require completion before public launch.

Privacy Policy

Last Updated: [DATE]  ·  Effective Date: [DATE]

1. Introduction

Designable AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights with respect to it when you use the Designable AI platform, mobile application, website, APIs, and related services (collectively, the "Platform").

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, you must discontinue use of the Platform.

This Privacy Policy is incorporated by reference into our Terms of Service.

2. Information We Collect

We collect information in three ways: information you provide directly, information generated by your use of the Platform, and information collected automatically.

2.1 Information You Provide Directly

(a) Account Information. When you create an account, we collect your name, email address, password (stored in hashed form — never plaintext), and user role (Designer, Manufacturer, Both, or Shopper).

(b) Design Content. When you use the AI design generation features, we collect the text prompts you enter, design style selections, slider preference settings, reference images you upload, and any feedback or refinement instructions you provide.

(c) Generated Artifacts. AI-generated product images, technical schematics, exploded-view diagrams, parts analyses, manufacturing guidance, cost estimates, and design history are stored on your device (Phase 1 — local only). When cloud sync is enabled in a future release, this content will also be stored on our servers.

(c-1) AI Provenance Metadata. Every image the Platform generates or edits carries embedded metadata identifying it as artificially generated, together with a design identifier. This marking is required by AI-content transparency law (see Section 4.4 of our Terms of Service). It contains no personal data — it does not encode your name, email address, or account identifier.

(d) Order and Transaction Information. When you place or fulfill manufacturing orders through the Platform, we collect order details, product descriptions, fabricator selections, quantities, shipping information, and correspondence related to the order. Payment card data is processed directly by our third-party payment processor (Stripe) and is not stored by Designable AI.

(e) Communications. When you contact us for support, report a problem, or communicate with other users through the Platform's messaging features, we collect and store the content of those communications.

(f) Shop and Marketplace Data. If you list items for sale or make purchases through the Platform's Shop feature, we collect listing details, pricing, transaction history, and wishlist data.

2.2 Information Generated by Your Use of the Platform

(a) Usage Data. We collect information about how you interact with the Platform, including features used, buttons tapped, navigation paths, session duration, error events, and crash reports.

(b) Device Information. We collect device type, operating system version, app version, device locale and language settings, and a device identifier (e.g., vendor identifier / IDFV).

(c) Log Data. Our servers automatically record certain information when you use the Platform, including IP address (where applicable), timestamps, and API request/response metadata.

2.3 Information from Third Parties

We may receive limited information from third-party authentication providers if you use social sign-in features (if/when enabled), and from payment processors confirming transaction completion.

3. How We Use Your Information

We use the information we collect for the following purposes:

(a) Operating the Platform. To provide all features and functionality, including AI design generation, manufacturing workflow, history, parts analysis, and marketplace features.

(b) AI Processing. Text prompts, design images, and related context you provide are transmitted to Google Cloud AI services (currently Google Gemini API) for AI-powered design generation and analysis. This is the core function of the Platform and is required to deliver the service. See Section 5 for more detail.

(c) Account Management. To create and maintain your account, authenticate your identity, and manage your user preferences and role.

(d) Order Fulfillment. To process manufacturing orders, facilitate communication between Designers and Fabricators, and manage the production workflow.

(e) Platform Improvement. To analyze how users interact with the Platform, identify bugs and performance issues, develop new features, and improve existing ones. We use aggregated and anonymized data for this purpose where possible.

(f) Communications. To send you account-related notifications, order updates, security alerts, and (where you have opted in) promotional communications. You may opt out of promotional communications at any time.

(g) Safety and Fraud Prevention. To detect and prevent fraudulent activity, abuse, violations of our Terms of Service, and other harmful conduct.

(h) Legal Compliance. To comply with applicable laws, respond to legal process, enforce our Terms of Service, and protect the rights, property, and safety of Designable AI, our users, and the public.

(i) Aggregate Analytics. To compile statistical and aggregate data about Platform usage, which does not identify individual users, for business analysis, reporting, and product development.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Third-Party Service Providers

We share information with third-party vendors who perform services on our behalf. These vendors are contractually required to use your information only as directed by Designable AI and in accordance with this Privacy Policy. Current categories of service providers include:

ProviderPurposeData Shared
Google Cloud AI (Gemini API)AI image/text generationPrompts, design images, context
SupabaseBackend, authentication, databaseAccount data, order data
StripePayment processingTransaction data (card data not shared with us)
Cloud hostingInfrastructureAll data stored on our servers
Analytics / crash reportingApp stability and analyticsUsage data, device info, crash logs

4.2 Fabricators

When you submit a manufacturing order to a Fabricator through the Platform, we share relevant design files, specifications, order details, and contact information with that Fabricator for the purpose of fulfilling your order. By submitting an order, you authorize this sharing.

4.3 Other Users

Designs you list publicly in the Shop are visible to other users. Your display name and role may be visible in connection with your public listings and messages.

4.4 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to: (a) comply with applicable law; (b) protect the rights, property, or safety of Designable AI, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms of Service.

4.5 Business Transfers

If Designable AI is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform before your information becomes subject to a materially different privacy policy.

5. AI and Your Data

5.1 How AI Processing Works

The design generation and analysis features of the Platform require sending your prompts, uploaded reference images, and design context to Google Cloud AI services. When you use these features, your input data leaves the Platform and is processed by Google's AI infrastructure.

5.2 Google's Data Practices

Google processes this data in accordance with the Google Cloud Terms of Service and Privacy Policy. We encourage you to review Google's privacy documentation. Designable AI does not control and is not responsible for Google's data handling practices.

5.3 No Sale of Design Data

Designable AI does not sell your design prompts, generated images, schematics, or parts data to any third party.

5.4 Training Data

In a future release, we may offer an opt-in program that allows you to contribute your validated design data to improve Designable AI's capabilities. This will be strictly opt-in with clear disclosure. We will not use your design data to train proprietary AI models without your explicit consent.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Platform's services. Specifically:

  • Account data: Retained until you request account deletion, plus a reasonable period thereafter for legal compliance.
  • Design history and generated content: Stored locally on your device; cloud-stored content retained until you delete it or your account is deleted, plus any legally required retention period.
  • Transaction records: Retained for a minimum of 7 years for tax, legal, and compliance purposes.
  • Analytics data: Retained per the applicable third-party provider's policies (typically 12–26 months).
  • Support communications: Retained for 3 years after resolution.

Upon account deletion, we will delete or anonymize your personal information within a commercially reasonable time, except where retention is required by law or legitimate business need.

7. Data Security

We implement commercially reasonable technical, administrative, and physical safeguards designed to protect your personal information. These measures include encryption of data in transit using TLS/HTTPS, passwords stored in hashed, salted form, API keys stored securely and not exposed to end users, and access controls limiting employee access to personal data.

No security system is completely impenetrable. We cannot guarantee the absolute security of your data. In the event of a data breach that is reasonably likely to result in risk to your rights and freedoms, we will notify affected users and applicable regulators as required by law.

You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately at security@designableai.app if you suspect unauthorized access to your account.

8. Your Choices

Account Information. You may update your account information at any time through the Platform's account settings.

Communications. You may opt out of promotional email communications by clicking "unsubscribe" in any such email or by contacting us. You cannot opt out of transactional communications while your account is active.

Design History. You may delete individual history entries from within the Platform at any time.

Account Deletion. You may request deletion of your account and associated personal data by contacting us at privacy@designableai.app. We will process your request within a commercially reasonable time, subject to legal retention obligations.

9. California Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA): the right to know what personal information we have collected; the right to delete personal information; the right to correct inaccurate information; the right to opt out of sale or sharing (we do not sell your data); the right to limit use of sensitive personal information; and the right to non-discrimination for exercising these rights.

To exercise these rights, contact us at privacy@designableai.app with the subject line "California Privacy Rights Request." We will respond within 45 days as required by law.

10. Users Outside the United States

The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

EEA/UK/Switzerland users: Our legal bases for processing your personal data are contractual necessity, legitimate interests, legal obligation, and consent (where required). You may have rights under the GDPR including access, rectification, erasure, portability, and objection to processing. Contact us at privacy@designableai.app to exercise these rights.

11. Children's Privacy

The Platform is not directed to individuals under the age of 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us at privacy@designableai.app.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you by email or in-app notification. Your continued use of the Platform after the effective date of the updated policy constitutes your acceptance of the changes.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Designable AI

[Address]

Privacy inquiries: privacy@designableai.app

Security issues: security@designableai.app

DMCA notices: dmca@designableai.app