Legal · Last updated 1 November 2026
Privacy Policy
This policy explains what personal data Iconcraft collects, why, who processes it, and the choices you have. Iconcraft is operated by Kallol Deb in India, who is responsible for your data.
What we collect
- Account data: your email address and sign-in records.
- Your work: the icons, styles, families and settings you save, and the SVG files of your saved icons.
- AI requests: the descriptions you type and any reference images you upload or sketch, the drawings returned, and usage details such as credits used and request size.
- Billing data: your plan, subscription status and renewal dates. Card, UPI and bank details are entered directly with Razorpay; we never see or store them.
- Technical data: basic logs such as IP address, browser type and errors, kept for security and troubleshooting.
Why we use it
- to create your account, sign you in and sync your work across devices;
- to produce AI drawings you ask for;
- to apply credits, run subscriptions and send receipts;
- to protect the service from abuse and fraud;
- to answer support requests and send essential service emails (we don't send marketing emails without your consent).
Who processes it
We use trusted providers to run Iconcraft. They process data only on our instructions:
- Supabase: database, sign-in and file storage;
- Vercel: website hosting;
- Razorpay: payments and subscriptions;
- Resend: sign-in and service emails;
- Cloudflare: bot protection on sign-in;
- Our AI provider: generating drawings from your prompts and reference images. Under its commercial terms, your requests are not used to train its models.
Some of these providers store data outside India. We do not sell your personal data or share it for advertising.
Cookies and local storage
We use your browser's storage to keep you signed in and remember studio preferences such as theme and quality. We don't use advertising or cross-site tracking cookies.
How long we keep it
We keep your account data and work while your account is active. When you delete your account, we delete your profile, saved work and files within 30 days, except billing records we must keep under tax law, and short-lived security logs.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to act for you. Email support@iconcraft.in and we'll respond within 30 days. You can also raise a complaint with the Data Protection Board of India.
Security
Data is encrypted in transit, access to each account's data is restricted to that account, and payments are handled by Razorpay. No system is perfectly secure, so please let us know at once if you notice anything suspicious.
Children
Iconcraft is not intended for anyone under 18 without a parent or guardian's consent, and we don't knowingly collect children's data.
Grievance officer and contact
Kallol Deb, Iconcraft · support@iconcraft.in. We aim to acknowledge grievances within 48 hours.
Changes
We may update this policy and will notify you of significant changes by email or in the studio.