Privacy Policy

What we collect

We collect an email address if you choose to join our KDP tips list, and we use it only to send those tips and updates. Visits are measured with privacy-friendly, cookieless analytics (Vercel Web Analytics) that do not build a personal profile of you. In the core studio, your cover is composed in your own browser and is not uploaded to our servers; your saved projects stay in your browser's storage on your device. The optional features described next work differently.

Accounts, credits and AI generation

An account is optional. You need one only for AI generation and credits.

• Sign-in: you sign in with a one-time email link or with Google. We use Supabase to handle sign-in and to keep your account, the profile details you give us (such as your name), your credit balance and your order records (email address, order number, pack and number of credits). If you sign in with Google, Google passes us the basic profile details you allow it to share, such as your email address and name.
• AI generation: the text brief you write, and any reference or source image you choose to use, are sent through our server to a third-party AI model provider (fal.ai) to produce the result. The links to the images you generate are saved in your account so that they appear in your history. The generated files themselves are stored by the provider and are not deleted automatically, including when you remove an item from your history.
• Abuse prevention: to limit abuse, our servers process your IP address (through Upstash) for short-lived rate limiting whenever you use a feature that calls our servers.
• Payments: card payments are handled by Lemon Squeezy, our Merchant of Record. We receive your order details, never your card number.

Third parties

We use Vercel to host the site and measure anonymous traffic, Supabase for accounts and order records, Google for optional sign-in and for fonts, Upstash for rate limiting and for our email list, fal.ai for AI generation, Lemon Squeezy for payments, Unsplash for the photos used in the optional 3D mockup scenes, and Amazon and other partners through clearly labelled affiliate links. Google Fonts typefaces load when you open the studio and on some pages, and Unsplash photos load in the 3D scenes, straight from those providers' servers, so your browser contacts Google and Unsplash directly. Email sent to our contact address is delivered through a mail-forwarding service. We do not sell or rent your personal data to anyone.

Your rights and contact

You can unsubscribe from emails at any time with one click, and you can ask us to access or delete any data we hold about you. The tool is not directed at children under 13. For any privacy request, email contact@veritascanvas.com.