Privacy Policy
Last Updated: June 9, 2026
1. Information We Collect
We collect information to provide a better, more personalized experience when you use our Service:
- Account Information: When you sign up or log in via third-party OAuth providers (Google, GitHub), we receive your name, email address, and profile picture.
- User Content: We store the prompts you write, the reference images you upload (for Image-to-Icon conversions), and the resulting generated icons in order to show your history. This content may be accessed by system administrators for moderation, abuse prevention, and service improvement.
- Technical & Security Data: We record your IP address and browser User Agent during registration and sign-in to prevent fraud, enforce rate limits, and block spam/bot accounts.
- Usage Data: We may collect analytics data regarding how you navigate the platform to improve our system stability and performance.
2. How We Use Your Information
We use the collected information for the following purposes:
- To provide, run, and maintain the AI generation platform.
- To track your credit balance and transaction history.
- To verify your identity and protect against unauthorized access or rate-limit violations.
- To communicate with you regarding updates, invoices, or customer support issues.
3. Data Sharing and Third-Party Services
We do not sell, rent, or trade your personal information. We only share information with trusted third-party service providers to the extent necessary to run the Service:
- AI Processing: Prompt text and reference images are sent to secure third-party AI processing providers to generate and refine your icons.
- Cloud Storage & Infrastructure: Generated icons, reference images, and account databases are stored securely with industry-standard cloud hosting and database providers.
- Payment Processors: Your transactions are handled entirely by secure third-party payment gateways (such as Midtrans or Polar). We do not store credit card or sensitive billing details on our servers.
4. Security
We prioritize the security of your data. We use industry-standard security measures, including HTTPS encryption, secure session handling via NextAuth.js, and restricted access to database servers, to prevent unauthorized access, alteration, or destruction of data.
5. Cookies
We use secure session cookies to keep you signed in to your account. These cookies are essential for the operation of the Service. You can disable cookies in your browser settings, but doing so will prevent you from signing in.
6. Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date.
7. Contact Information
If you have any questions about this Privacy Policy, please contact us at support@iconara.app.