This Privacy Policy explains how SVG Weave ("SVG Weave", "we", "us"), operated by Amita Shukla, collects, uses and shares personal information when you use the svgweave.com website and app (the "Service"). If you use the Service, you agree to the collection and use of information as described here. We use the information we collect only to provide and improve the Service. We do not sell your personal information, and we do not share it with anyone except as described in this policy. The terms used here have the same meanings as in our Terms of Service.
What we collect and why
Your account
Accounts are run by Clerk. You can sign up with an email address and password, or with Google or GitHub.
- Email and password. Clerk stores your email address and a hashed form of your password. We never see your password.
- Google or GitHub. Clerk receives your email address, your name and your profile picture from the provider you pick.
- Sessions. Clerk keeps sign-in session records (such as the device, browser and IP address of each session) to keep your account secure.
We copy your Clerk user ID, your email address and a username (taken from your name or the start of your email address) into our own database, so that we can link your projects, credits and purchases to you. We use your email address only to run your account, to match your purchases to it, to reply when you contact us, and to show us who sent feedback through the UserJot widget (see Feedback widget).
Your projects
Your projects are stored in our database on Convex so you can come back to them. For each project we store:
- the project title and the SVGs in it, including every SVG you paste or upload and every SVG that is generated;
- the editor graph: the prompts you write, the style and size you choose, and how the steps connect;
- a short title for each SVG, which an AI model writes for you; and
- for each generation, the number of AI tokens used, what it cost us and how many credits you were charged.
When you upload a PNG, JPG or other image to convert it to SVG, the image is sent to the AI provider to be converted. We keep the SVG that comes back, not the image.
Credits
We keep your credit balance with your account. Each generation records how many credits it was charged, and each purchase records how many credits it added.
The assistant chat
When you create or edit an SVG through the chat, the messages you send and the assistant's replies are stored so the conversation can continue. Chat history is hosted by Turso, in the European Union or the United States.
AI processing
To generate, animate and edit SVGs, we send your prompt, the SVG you are working on and any image you upload to AI models through the Vercel AI Gateway:
- QuiverAI (Arrow) turns text and images into SVGs;
- Google (Gemini) writes the animations and edits, and the short titles for your SVGs; and
- Anthropic (Claude) runs the assistant chat.
We do not use your prompts, images or SVGs to train AI models. What the AI services do with them is set by their own terms. According to those terms, as of the date of this policy:
- Vercel AI Gateway: according to Vercel's documentation, the gateway does not keep prompts or outputs after a request is completed and does not use them for training.
- Google (Gemini): according to the Gemini API termsfor paid services, Google does not use prompts or responses to improve its products, but logs them for a limited time to detect abuse. Vercel lists Google among the providers that don't train on prompts sent through the gateway.
- Anthropic (Claude): according to Anthropic's Commercial Terms, Anthropic may not train models on customer content from its API.
- QuiverAI (Arrow): we could not confirm that QuiverAI does not use inputs to improve its models. Its Terms give QuiverAI a licence to process content to provide and improve its services, and its Privacy Policykeeps data as long as reasonably necessary. Don't upload images or prompts to text-to-SVG or image-to-SVG that you aren't comfortable sharing with QuiverAI on those terms.
Purchases
Credit packs are sold through Polar, our merchant of record: Polar sells the credits to you, takes the payment, handles sales tax and VAT, and sends your receipt. Polar collects your payment and billing details under its own privacy policy. We never receive your card or bank details.
When a purchase completes, Polar sends us a record of it, and we store:
- the Polar order ID and the credit pack you bought;
- the email address on the order and your Polar customer ID; and
- the number of credits added and when.
We use these only to add the credits to your account, to stop an order being counted twice and to help you if something goes wrong.
Analytics
OpenPanel (self-hosted). We measure how the site and app are used with our own OpenPanel analytics server (events.andronix.app), which runs on Railway in the Netherlands (European Union). It records the pages you view, clicks on links that leave the site, and a few named actions: signing up, creating a project, starting a render, opening an edit and exporting an SVG. It also receives your browser and device type and the referring page. Your IP address is used only to work out your country, and is not stored: our OpenPanel server is configured to keep only the country, never your city, region or coordinates. OpenPanel does not use cookies or store anything in your browser, and no analytics events are sent if your browser sends a Do Not Track or Global Privacy Control signal. These events are kept for at most 13 months.
Feedback widget
Inside the app, a feedback widget from UserJot lets you send ideas and bug reports. So that we know who sent them, UserJot receives your account ID, email address and username. Anything you write in the widget is stored by UserJot.
Other content on the site
- The demo video on the home page is a YouTube video. Nothing loads from YouTube until you press play, and then it plays from youtube-nocookie.com under Google's Privacy Policy.
- The Peerlist badge on the home page is an image loaded from peerlist.io, which receives your IP address.
We don't send you promotional email. Polar emails your order receipts, and Clerk may send emails about your account's security.
When you contact us
If you email us, we receive your email address and the contents of your message, and we use them only to reply to you.
Logs
Our hosting providers keep server logs to run and debug the Service. These can include your prompts, error messages and request details. On our plan, Vercel keeps these logs for 1 day, according to its documentation. Convex shows only a short history of recent function logs.
Cookies and browser storage
We use no advertising or tracking cookies.
- Sign-in. Clerk sets cookies that keep you signed in and protect your account. The app can't work without them.
- Feedback widget. UserJot stores the widget's own settings in your browser's local storage (entries starting with
uj_). It sets no cookies on svgweave.com. - Analytics. OpenPanel sets no cookies and stores nothing in your browser.
Because these are all strictly necessary for features you use, and nothing is used for advertising or to track you across sites, we don't show a cookie banner or ask for consent. If we ever add cookies that need your consent, we will ask first.
Third-party services
The Service uses these providers, which have their own terms and privacy policies. They get only the data they need to do their job for us.
- Clerk (accounts and sign-in)
- Convex (database for accounts, projects, credits and orders)
- Vercel (hosting, and the AI Gateway that routes requests to the AI models)
- QuiverAI, Google and Anthropic (the AI models, reached through the Vercel AI Gateway)
- Turso (assistant chat history)
- Polar (merchant of record: checkout, payment, tax, receipts and refunds)
- Railway (hosting for our self-hosted OpenPanel analytics)
- Google (the YouTube demo video)
- UserJot (feedback widget)
This policy covers only the systems we operate. It does not cover the practices of these third parties.
Where your data is processed
Your data is processed primarily in the United States: our database (Convex), accounts (Clerk) and Polar are there. Vercel runs our server functions in the United States (San Francisco), South Africa (Cape Town) and India (Mumbai). The AI providers and Turso may process data in the United States or other countries where they operate. Our OpenPanel analytics runs in the Netherlands (European Union). If you are in the European Economic Area, the United Kingdom or Switzerland, some of your data is transferred to countries without an adequacy decision, such as the United States. We rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses in our service providers' data processing agreements.
Why we may use your data (GDPR)
If you are in the European Economic Area, the United Kingdom or Switzerland, the controller of your personal data is Amita Shukla, who operates SVG Weave, reachable at support@svgweave.com. We rely on these legal bases:
- Contract: to run your account, store your projects, generate SVGs, sell and track credits, and answer your emails.
- Legitimate interests: to keep the Service secure, prevent abuse and fraud, understand how it is used so we can improve it, and collect your feedback.
- Legal obligation: to keep purchase records for tax and accounting.
Your rights
You can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict how we use it, or give it to you in a portable format. You can object to our use of it based on legitimate interests, and withdraw any consent you gave. If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.
India. For users in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023. The Data Fiduciary and Grievance Officer is Amita Shukla, reachable at support@svgweave.com. You may ask for access to, correction of or erasure of your personal data, and withdraw consent at any time.
To use any of these rights, email support@svgweave.com from the email address on your account. We reply within 30 days.
How long we keep it
- Your account, projects, credits and chat history: while your account exists, and erased within 30 days after you ask us to delete your account.
- Purchase records: 8 years for tax and accounting. After your account is deleted they no longer contain your name, email address or account ID.
- OpenPanel analytics: at most 13 months. We store only the country derived from your IP address, never the address.
- Emails you send us: as long as we need them to help you.
How to delete your account and data
To delete your SVG Weave account, email support@svgweave.com from the email address on your account and ask us to delete it. There is no delete button in the app yet.
Once we have checked that the request comes from you, we erase the following within 30 days, except where the law requires us to keep a record:
- your sign-in account at Clerk, including your email address, name, profile picture and sessions;
- your account record and your credit balance;
- all your projects: the SVGs, prompts, editor graphs, titles and usage records in them;
- your assistant chat history; and
- your profile and messages in the feedback widget (UserJot).
Unused credits are forfeited.Credits left on your account when it is deleted are lost and are not refunded. Export any SVGs you want to keep first; deleted projects can't be recovered.
What we keep. A record of each credit pack you bought (the order ID, the pack, the credits and the date) is kept for 8 years for tax and accounting purposes, without your name, email address or account ID. Polar, our merchant of record, keeps its own records of your purchases under its own privacy policy. Our analytics are not linked to your account and expire on their own (see Analytics).
Children's privacy
SVG Weave is not meant for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we find that a person under 18 has given us personal information, we delete it. If you are a parent or guardian and you know that your child has given us personal information, please contact us so we can act.
Security
We value your trust in providing us your personal information, so we use commercially acceptable means to protect it, including encrypted connections and access controls. No method of sending or storing data on the internet is 100% secure, so we cannot guarantee its absolute security.
Links to other sites
The Service contains links to other sites. They are not operated by us, so please review their privacy policies. We have no control over, and assume no responsibility for, their content or practices.
Changes to this Privacy Policy
We may update this policy from time to time. When we do, we post the new version on this page and change the "Last updated" date. Changes take effect when they are posted.
Contact us
Questions about this policy or your data: support@svgweave.com.
SVG WeaveOperated by Amita Shukla