Privacy Policy

The Design Engine is a brand-intelligence platform. We serve computed design directives (colors, typography, logos, layouts, voice guidance) to AI tools and coding agents. We do not process the content you generate using those directives. Decks, documents, diagrams, code, and other artifacts you create stay with you and your chosen AI tools.

This is the load-bearing commitment: our telemetry is scoped to brand metadata and generation signals (counts, formats, quality scores), never verbatim customer content.

Account information. Email address and OAuth provider identifiers returned when you sign in with Google, GitHub, or Microsoft, and information you voluntarily provide such as name and company. Sign-in is OAuth-only: we never receive or store a password.

Brand profiles. Colors, typography, logos, brand voice, and other design attributes you upload or claim through the Service. For verified brands, the email domain used to verify ownership.

Usage data. API keys called, MCP tools invoked, generation counts, format of requested outputs, and quality scores. We log enough to meter usage, detect abuse, and improve service reliability, never the text or imagery of what you produce.

Technical data. IP address, user agent, request headers, response codes, and error traces (via Sentry) scoped to stack traces and URL/method only.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate users and secure accounts.
• Detect and prevent abuse, fraud, and unauthorized access.
• Communicate with you about service updates, security alerts, and your account.
• Improve the Service via aggregate usage analysis (brand metadata, not content).

We do not sell your personal information or share it with third parties for advertising.

Vercel Analytics. We use Vercel Analytics and Speed Insights to measure site performance and understand how visitors use our marketing pages. These tools collect page views, referrer, device type, Core Web Vitals, and anonymous interaction events such as button clicks. They do not use cookies and do not store any personally identifiable information. No consent banner is required for this measurement.

HubSpot. We use HubSpot to manage marketing contacts. The HubSpot tracking script loads on our marketing pages only after you accept marketing cookies in our cookie banner, and may then set first-party cookies (including __hstc, hubspotutk, and __hssc) used to associate a form submission with previous visits and measure conversion. When you submit a form, we send it to HubSpot from our server. These cookies are governed by HubSpot's Privacy Policy.

Google Analytics. We use Google Analytics 4 to understand which campaigns and pages bring visitors to our site. It loads only after you accept statistics cookies in our cookie banner, and may then set first-party cookies (including _ga and _ga_*) to count visits and return visits. Google Analytics is governed by Google's Privacy Policy.

Your choices. Our cookie banner is provided by Cookiebot (Usercentrics), which stores your choice in a CookieConsent cookie so we don't ask again on every page. You can change or withdraw your choice at any time with “Cookie settings” in the site footer.

We do not run advertising cookies, retargeting pixels, or any third-party tracking beyond what is described above.

For the full, current list of cookies, what each one does and how long it lasts, see our Cookie Declaration. It updates automatically after each scan of our website.

When you claim a brand slug, the canonical URL at /brands/{slug}/DESIGN.md is public by default. Any visitor or AI agent can fetch the file without authentication. Brand profiles can be set to private mode where your agreement includes it.

Your personal account data (email, billing, usage history) is never included in the public URL. The public surface is strictly brand attributes you have chosen to share.

We retain account and brand data for as long as your account is active. Deleting a brand removes its profile, colors, typography, voice, and API keys. To delete your account and its uploaded files, contact us and we will confirm when the deletion is complete. Backups are purged on their regular rotation schedule.

Aggregate usage analytics (counts, formats, trends) may be retained indefinitely in de-identified form.

You can update or delete a brand at any time in the app. To access, export, or delete your account data, or to exercise GDPR/CCPA rights, contact us at privacy@thedesignengine.ai.

We may update this Privacy Policy from time to time. Material changes will be communicated by email and posted prominently on the Service at least thirty (30) days before taking effect.

Questions about this Privacy Policy can be directed to privacy@thedesignengine.ai.