Privacy Policy for SVAG
Last updated: 1/10/2026
1. What Data We Collect
SVAG collects the following data:
- Email address - for authentication and communication
- SVG icons - that you save to your gallery
- Icon source URLs - to identify the origin of icons
- Usage metadata - icon count, creation date
- Payment information - processed exclusively by Stripe, we do not store it
2. How We Use Your Data
We use your data exclusively for:
- Providing the service - storing and managing SVG icons
- Authentication - verifying your identity during login
- Payment processing - managing Pro subscriptions
- Service improvement - analyzing usage to improve features
3. Data Sharing
We do not share your data with third parties for marketing purposes. Data is only shared with these service providers:
- Supabase - database hosting and authentication
- Stripe - payment processing
- Vercel - application hosting
All these providers comply with strict security standards and GDPR.
4. Data Security
Your data is protected using:
- SSL/TLS encryption - for data transmission
- Encrypted storage - for database data
- Row Level Security (RLS) - each user sees only their own data
- Regular security audits - of infrastructure
5. Your Rights (GDPR)
You have the right to:
- Access your data - you can request a copy of all your data
- Correct your data - you can correct inaccurate information
- Delete your data - you can request deletion of all your data
- Export your data - you can export your icons
- Restrict processing - you can limit how we use your data
- Data portability - you can transfer data to another provider
6. Data Retention
We retain your data:
- Active account - for the duration of service use
- After account deletion - data is deleted within 30 days
- Payment records - retained for 7 years (legal requirement)
7. Cookies and Tracking
SVAG uses minimal cookies:
- Authentication token - to maintain login session
- Local storage - for Chrome Extension settings
We do not use third-party tracking cookies or analytics tools.
8. Children
The service is not intended for persons under 16 years of age. We do not knowingly collect personal data from children.
9. Privacy Policy Changes
We will notify you of significant changes by email. Minor changes will be reflected in the "Last updated" date above.
This Privacy Policy complies with GDPR (General Data Protection Regulation) and applicable legislation.