Privacy Policy

This policy describes personal data processed by Graphivo. Optional analytics and advertising measurement start only after your consent. We do not sell personal information.

1. Who is responsible

Astirna LLC, 8 The Green, Ste B, Dover, Delaware 19901, United States, operates Graphivo and controls the personal data processed to provide it. Contact privacy@graphivo.com for privacy requests.

2. Data needed to provide Graphivo

• Accounts: email, name, account identifier, authentication sessions, and, if you use Google sign-in, Google account information. Sign-in links expire after 15 minutes; sessions expire after 60 days without renewal. Expired sessions and tokens are removed by scheduled housekeeping.
• Designs: prompts, brand names, uploads, generated designs, conversations, edits, and saved files. We process these to generate, edit, store, and deliver your work. Do not upload sensitive personal information or images you have no right to use.
• Payments: package, amount, currency, purchase and payment identifiers, subscription status, delivery consent, and download entitlements. Stripe processes payment and billing information. We do not receive your full card number.
• Security and usage: request and error logs, browser information, session IP addresses, device identifiers, salted IP hashes for abuse limits, credit balances, generation costs, and service events. Cloudflare Turnstile evaluates browser and device signals to prevent automated abuse.
• Email: addresses and content needed for sign-in, receipts, service notices, and support. Optional product emails require opt-in; you can unsubscribe through your account or the message.

Where the GDPR or UK GDPR applies, our legal bases are contract performance and steps you request before a contract (Article 6(1)(b)); legitimate interests in service reliability, fraud prevention, and support (Article 6(1)(f)); legal obligations such as accounting (Article 6(1)(c)); and consent for optional analytics, advertising measurement, and marketing (Article 6(1)(a)).

3. Optional analytics and advertising

With analytics consent, PostHog records page visits, link and button clicks, device and browser information, campaign information, and product events such as generation, sign-up, checkout, and purchase. An internal account identifier connects a consenting user's activity. Automatic capture masks text and element attributes; analytics URLs exclude query strings and private design identifiers. Session recordings are disabled. Automatic analytics excludes prompts, uploads, designs, and payment details.

Where configured, Google Analytics measures visits and product events with analytics consent. Google Ads measures attribution and purchases with advertising consent. Advertising personalization is disabled in our tags. Providers receive technical connection information when your browser contacts them.

You can accept, reject, or customize optional cookies, and reopen Cookie settings in the footer. Withdrawal stops future optional capture without affecting earlier lawful processing. Contact us to request deletion of identifiable analytics records.

4. Cookies and local storage

• Essential authentication cookies keep you signed in; a device cookie supports free-credit abuse prevention. Turnstile may use security storage.
• The gv_consent cookie stores your choice for 180 days. Local storage remembers the same choice and conversions already reported.
• Editor drafts and preferences may be stored in your browser. Clearing site data removes local-only work.
• After consent, PostHog uses ph_* storage for visitor and session identifiers. Google may use _ga* analytics and _gcl* advertising cookies when enabled.

5. Providers and international processing

• Cloudflare: hosting, database, storage, security, and bot protection. Our database and storage have a Western Europe location preference; this does not guarantee all processing remains in Europe.
• OpenAI: prompts and reference images for generation, refinement, planning, and moderation. We do not train our own models on your work. OpenAI's API data controls and retention terms apply to its processing.
• Stripe and Link: Managed Payments checkout, merchant-of-record services, tax calculation, subscriptions, fraud prevention, transaction receipts, and billing support.
• Amazon Web Services (SES, US East): authentication, transaction, and opted-in product emails.
• PostHog: optional product analytics in its US cloud.
• Google: optional sign-in, analytics, and advertising measurement where configured.

Providers may process data in the United States and other countries. Where required for EEA or UK transfers, we rely on applicable adequacy decisions or contractual safeguards such as Standard Contractual Clauses. Contact us for information about safeguards relevant to your data.

6. Retention

Anonymous accounts that have not purchased and remain unused for 30 days are deleted with their files. Deleted designs and pictures have a 30-day recovery period before their files are removed. Signed-in designs remain while your account is in use, subject to storage limits.

After paid access ends, excess storage has a 60-day grace period with notices. Accounts without active paid access and unused for 2 years receive a notice and 60 days to return before their cloud content is deleted. The Terms explain these limits.

Account information, correspondence, service events, and identifiable analytics are retained while needed for their account, support, security, or measurement purpose. Payment, tax, consent, and dispute records may survive account deletion where needed for legal obligations or claims. Provider backups and logs expire under their retention schedules. Contact us for deletion or information about a particular record.

7. Rights and choices

Depending on your location, you may request access, correction, deletion, restriction, or a portable copy of personal data, object to legitimate-interest processing, and withdraw consent. We may verify account ownership and will respond within the legally required period. You may complain to your local data protection authority, including an EEA authority or the UK Information Commissioner's Office.

We do not sell data or use it for cross-context behavioral advertising. Optional conversion measurement can be disabled in Cookie settings. Graphivo is not intended for children under 16; contact us if you believe a child has provided data.

8. Changes and contact

We update this policy when processing changes and provide notice of material changes. For questions or requests, email privacy@graphivo.com.