Privacy Policy

The Design Engine is a brand-intelligence platform. We serve computed design directives — colors, typography, logos, layouts, voice guidance — to AI tools and coding agents. We do not process the content you generate using those directives. Decks, documents, diagrams, code, and other artifacts you create stay with you and your chosen AI tools.

This is the load-bearing commitment: our telemetry is scoped to brand metadata and generation signals (counts, formats, quality scores), never verbatim customer content.

Account information. Email address, password hash (for email/password auth), OAuth provider identifiers (Google, GitHub, Microsoft) when you sign in via those providers, and information you voluntarily provide such as name and company.

Brand profiles. Colors, typography, logos, brand voice, and other design attributes you upload or claim through the Service. For verified brands, the email domain used to verify ownership.

Usage data. API keys called, MCP tools invoked, generation counts, format of requested outputs, and quality scores. We log enough to bill accurately, detect abuse, and improve service reliability — never the text or imagery of what you produce.

Technical data. IP address, user agent, request headers, response codes, and error traces (via Sentry) scoped to stack traces and URL/method only.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate users and secure accounts.
• Process payments and manage subscriptions.
• Detect and prevent abuse, fraud, and unauthorized access.
• Communicate with you about service updates, security alerts, and billing.
• Improve the Service via aggregate usage analysis (brand metadata, not content).

We do not sell your personal information or share it with third parties for advertising.

Vercel Analytics. We use Vercel Analytics and Speed Insights to measure site performance and understand how visitors use our marketing pages. These tools collect page views, referrer, device type, and Core Web Vitals. They do not use cookies and do not store any personally identifiable information. No consent banner is required for this measurement.

HubSpot. When you interact with a contact or waitlist form on this site, HubSpot loads a form embed that may set first-party cookies (including __hstc, hubspotutk, and __hssc) used to associate your form submission with previous visits and measure conversion. These cookies are governed by HubSpot's Privacy Policy. We load the HubSpot embed only when a form is opened, not on page load.

We do not run advertising cookies, retargeting pixels, or any third-party tracking beyond what is described above.

When you claim a brand slug, the canonical URL at /brands/{slug}/DESIGN.md is public by default on the Free and Verified Brand tiers — that's the point of the free tier. Any visitor or AI agent can fetch the file without authentication. Paid tiers can opt their brand profiles into private mode.

Your personal account data (email, billing, usage history) is never included in the public URL. The public surface is strictly brand attributes you have chosen to share.

We retain account and brand data for as long as your account is active. On account deletion we remove your brand profiles and API keys within 30 days from primary storage; backups are purged on their regular rotation schedule.

Aggregate usage analytics (counts, formats, trends) may be retained indefinitely in de-identified form.

You can access, update, or delete your account at any time from your account settings. For data-portability requests, GDPR/CCPA rights, or deletion inquiries, contact us at privacy@thedesignengine.ai.

We may update this Privacy Policy from time to time. Material changes will be communicated by email and posted prominently on the Service at least thirty (30) days before taking effect.

Questions about this Privacy Policy can be directed to privacy@thedesignengine.ai.