A practical view of how Isometricon handles user data.

Isometricon collects the information needed to create and deliver icons, maintain user accounts, process payments, protect the platform, and respond to support requests. That includes information you provide directly and technical data generated when you use the service.

We do not sell your personal information. We share data only with service providers and infrastructure partners that help us operate Isometricon, or when disclosure is required by law.

Depending on how you use Isometricon, we may collect:

• Account details such as name, email address, profile information, and login identifiers.
• Generation inputs including prompts, uploaded source images, refinement instructions, and generation history.
• Billing and purchase records, including package selections, transaction metadata, and payment status.
• Product usage data such as browser details, IP address, device type, session events, and error logs.
• Communications you send through support, feedback forms, or testimonial submissions.

Some information is collected by our providers on our behalf, including authentication, storage, hosting, analytics, and payment processing services.

We process personal information to:

• Create and manage your account.
• Generate icons from text prompts and image uploads.
• Store your library, downloads, and usage history.
• Process purchases, reconcile payments, and prevent fraud or abuse.
• Monitor reliability, troubleshoot issues, and improve product quality.
• Respond to support requests and communicate service-related updates.
• Meet legal, tax, accounting, and security obligations.

Where required by applicable law, we rely on consent, contract performance, legitimate interests, or legal obligations as the basis for processing.

We use third-party providers to run key parts of the service. These providers may process data only to perform services for Isometricon and under their own contractual and technical controls.

• Clerk for authentication and account session management.
• Supabase for application data, logs, and account-linked records.
• UploadThing and related storage infrastructure for file delivery and asset handling.
• Google AI services for prompt and image processing used in generation workflows.
• Mayar and Polar for payment processing where available.
• Vercel and monitoring providers for hosting, performance, and operational security.

We may also disclose information if required by law, to enforce our rights, to protect users or the public, or in connection with a merger, financing, acquisition, or asset transfer.

We do not use your uploaded images, prompts, or generated outputs to train models without your permission.

We retain data for as long as needed to provide the service, preserve account history, meet legal obligations, resolve disputes, and investigate abuse. Retention periods vary by data type and operational necessity.

We apply reasonable safeguards such as encrypted transport, scoped access controls, provider-level security measures, logging, and internal restrictions on access to account and billing data. No internet-based system can be guaranteed 100% secure.

Depending on your location, you may have the right to:

• Request access to personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of information, subject to legal or security exceptions.
• Object to or restrict certain processing activities.
• Request a portable copy of certain information.
• Withdraw consent for optional communications where consent is the basis.

We may need to verify your identity before completing a request. You can contact us using the details below and we will respond within a reasonable timeframe consistent with applicable law.

Isometricon uses cookies and similar technologies for login state, security, product preferences, and analytics. Some cookies are required for the service to function properly.

You can control cookies through your browser settings, but disabling essential cookies may prevent sign-in or interrupt core workflows.

Our providers may process data in countries outside your own. When cross-border transfers apply, we rely on contractual protections, provider safeguards, and other lawful transfer mechanisms appropriate to the region involved.

If you are an EU, EEA, UK, or similarly protected user and need more detail about these mechanisms, contact us directly.

We may update this policy from time to time to reflect operational, legal, or product changes. Material updates will be published on this page with a revised effective date.

For the rules that govern your use of the product, see our Terms of Service.