Privacy Policy

1. Introduction

SketchAI ("SketchAI", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered visual note generation services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, such as:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Payment information (processed through secure third-party providers like Creem)
• Profile information (avatar, preferences)
• Communications with us (support tickets, emails)
• Subscription and billing information
• Credit usage and transaction history

Content and Generated Notes

When you use our Service to generate visual notes, we collect and process:

• Source Content: Articles, audio files, PDFs, and other content you upload or submit for note generation
• Generated Notes: Visual notes created by our AI system from your source content
• Usage Data: Information about how you use generated notes, including access times and download activity
• Generation Metadata: Timestamps, credit consumption, generation parameters, and processing logs

Important: Your source content and generated notes are stored securely on our servers to enable you to access them through your account. We do not use your content or generated notes for training our AI models or for any purpose other than providing the Service to you, unless you explicitly consent otherwise.

Automatically Collected Information

When you visit our Service, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, clicks)
• Cookies and similar tracking technologies
• Log data (access times, referring URLs)

Information from Third-Party Services

If you authenticate using OAuth providers (Google, GitHub, etc.), we may receive:

• Basic profile information (name, email, profile picture)
• Authentication tokens
• Any additional information you authorize

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process transactions and manage your account
• Send administrative information and updates
• Respond to your comments, questions, and support requests
• Improve and personalize your experience
• Monitor and analyze usage patterns and trends
• Develop new products, services, and features
• Prevent fraud and enhance security
• Comply with legal obligations
• Send marketing communications (with your consent)

4. How We Share Your Information

We may share your information in the following situations:

With Service Providers

We share information with third-party vendors who perform services on our behalf, such as:

• Payment processors: Creem and other payment providers to process your transactions (they do not have access to your source content or generated notes)
• Cloud hosting providers: To store and process your data securely
• AI service providers: To power our note generation capabilities (content is processed securely and not retained by these providers for training purposes)
• Analytics services: To understand how our Service is used (aggregated, anonymized data only)
• Customer support tools: To assist you with support requests
• Email service providers: To send you service-related communications

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

For Legal Purposes

We may disclose your information when required by law or to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our terms and agreements

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information and content, including:

• Encryption of data in transit (SSL/TLS) for all data transfers
• Encryption of sensitive data at rest, including your source content and generated notes
• Secure access controls and authentication requirements for all systems
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy
• Incident response procedures for data breaches
• Regular backups of your data to prevent data loss
• Access logging and monitoring to detect unauthorized access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information and content, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your personal information and content for as long as necessary to:

• Provide our services to you and maintain your account
• Allow you to access your generated notes through your account
• Comply with legal obligations and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records for accounting and tax purposes

Content Retention: Your source content and generated notes are stored on our servers as long as your account is active. If you delete your account, we will delete your content within 30 days, except where we are required to retain it for legal or regulatory purposes.

Account Deletion: Upon account deletion, we will securely delete or anonymize your personal information and content in accordance with our data retention policies, subject to any legal requirements to retain certain information.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

You can request access to your personal information and receive a copy in a structured, machine-readable format.

Correction and Update

You can request that we correct or update inaccurate or incomplete personal information.

Deletion

You can request deletion of your personal information and content, subject to certain exceptions such as legal obligations or ongoing disputes. You can delete individual generated notes through your account, or request deletion of your entire account and all associated content.

Objection and Restriction

You can object to or request that we restrict processing of your personal information.

Marketing Communications

You can opt-out of marketing emails by clicking the unsubscribe link or contacting us directly.

Cookies

You can manage cookie preferences through your browser settings. See our Cookie Policy for more information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to be informed about data processing
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making
• The right to lodge a complaint with supervisory authorities

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

For significant changes, we will provide additional notice through email or a prominent notice on our Service.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Privacy Email: privacy@sketchai.com
• Support Email: support@sketchai.com
• Website: https://sketchai.com
• Business Hours: Monday - Friday, 9:00 AM - 6:00 PM (UTC+8)

For data protection inquiries or to exercise your privacy rights, please email us at privacy@sketchai.com with "Privacy Request" in the subject line.