Privacy Policy

Glyph is built by founders, for founders. We treat your brand ideas the way we'd want ours treated - with absolute confidentiality. This policy explains exactly what we collect, why, and what we'll never do.

1. What We Collect

We keep data collection to the minimum needed to deliver a great experience:

• Brand Inputs: The names, descriptions, and creative direction you provide to our generator. These are used solely to produce your brand assets.
• Generated Assets: Logos, palettes, typography, and other design outputs created during your session.
• Account Data: Email address and authentication details when you create an account (powered by Clerk).
• Usage Analytics: Anonymous, aggregated data about how features are used, collected via Vercel Analytics. No personal browsing profiles are built.
• Payment Data: Processed entirely by Polar. We never see, store, or have access to your card details.

2. How We Use Your Data

• Generate and deliver your brand identity system.
• Save your generation history so you can revisit and refine past work.
• Process purchases and manage account access.
• Improve the quality and reliability of our design engine.
• Send critical service updates (never marketing spam).

3. Your Brand Ideas Stay Yours

This is non-negotiable. Your brand names, briefs, and generated outputs are never used to train public AI models, shared with other users, or sold to third parties. Your next startup idea is safe with us.

4. Data Storage & Retention

Generation history is stored locally in your browser and optionally in our cloud database (Supabase) if you have an account. You can delete your local data at any time by clearing browser storage. Account data is retained while your account is active and deleted within 30 days of account closure upon request.

5. Third-Party Services

We partner with a small number of trusted services:

• Clerk: Authentication and account management.
• Polar: Payment processing and checkout infrastructure.
• Vercel: Hosting, edge delivery, and anonymous analytics.
• Supabase: Cloud database for account-linked generation history.

Each provider operates under their own privacy policy and is selected for their commitment to data security.

6. Cookies & Local Storage

We use a minimal set of cookies and browser storage:

• Essential Cookies: Authentication session tokens (Clerk). Required for the app to function.
• Local Storage: Your generation history, sidebar preferences, and draft projects. Stays on your device.
• Analytics: Vercel Web Analytics uses privacy-friendly, cookie-less tracking. No cross-site tracking.

We do not use advertising cookies, tracking pixels, or any third-party marketing trackers.

7. AI Processing

To generate your brand, the inputs you provide (such as your brand name, description, and creative direction) are sent to third-party AI providers that power our generation engine. These inputs are processed solely to produce your outputs and are not used by us to train public models. Each AI provider operates under its own terms and privacy commitments. Do not submit confidential information you are not comfortable processing through a third-party AI service.

8. Data Security

We use industry-standard measures - encryption in transit, access controls, and trusted infrastructure providers - to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. International Data Transfers

Glyph relies on global infrastructure providers, so your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Children's Privacy

Glyph is not directed to children. You must be at least 16 years old, or the age of digital consent in your jurisdiction, to use the service. We do not knowingly collect data from children below that age.

11. Your Rights

Depending on your location, you may have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct or delete your account and associated data.
• Object to or restrict certain processing, and withdraw consent.
• Clear local browser data independently without contacting us.

To exercise any of these rights, email us at the address below. We may need to verify your identity before acting on a request.

12. Changes to This Policy

We may update this Privacy Policy as Glyph evolves. Material changes will be communicated via email or an in-app notice, and the effective date above will be updated. Continued use after changes constitutes acceptance.

13. Contact

Questions, concerns, or data requests? Reach us directly at support@glyph.software. Real humans reply.