📄 Privacy Policy
Last updated: 7 January 2025
1. Who We Are
SketchToImage Online ("we", "our", "the Service") converts users' sketches into high-fidelity renders. The controller of your personal data is Zhengmao Sun.
Address: Room 302, No. 181, North District, Maanshan
Shajing Street, Bao'an District,
Shenzhen, Guangdong 518104, China
Contact: privacy@sketchtoimage.online | +86 180 4694 9173
2. Information We Collect
| Category | Examples | Purpose / Legal basis (GDPR) |
|---|---|---|
| Account data | Name, e-mail, hashed password, preferred language | Contract – create & maintain your account |
| Content you upload | Sketch images, prompts, generated renders | Contract – provide core functionality |
| Payment data | Last 4 digits of card, expiry, country (processed by Stripe) | Legitimate interest – fraud prevention & billing |
| Usage data | IP address, browser, OS, pages visited, time stamps | Legitimate interest – analytics, security |
| Cookies & similar tech | See § 7 | Consent (where required) |
We do not intentionally collect special-category data (race, health, etc.).
3. How We Use Your Information
- Deliver and improve the Service
- Process payments and issue invoices
- Provide support, send important account or policy updates
- Detect, prevent and investigate fraud or abuse
- With your consent, send product news or surveys (you may opt out at any time)
4. Sharing & Disclosure
We never sell your personal data. We share it only with:
| Provider | Reason | Location & safeguards |
|---|---|---|
| Vercel | Hosting / CDN | EU & US → Standard Contractual Clauses |
| Stripe | Payment processing | US → SCC + Stripe's Binding Corporate Rules |
| Google Analytics | Site analytics | EU & US → IP-anonymisation enabled |
| Microsoft Clarity | UX heat-maps/session replay | EU & US |
A full up-to-date sub-processor list is available on request.
5. Data Retention
- Account & billing data – 7 years (Singapore tax law)
- Uploaded sketches & renders – 30 days after account deletion, unless you request earlier erasure
- Analytics logs – 26 months, automatically truncated
6. Your Rights
Regardless of where you live, we honour the rights found in GDPR & CCPA: access, correction, erasure, restriction, portability, objection, non-discrimination and the right not to be subject to solely automated decisions.
Email privacy@sketchtoimage.online to exercise these rights. We will verify your identity before acting on the request.
7. Cookies & Tracking
We use first-party cookies for login sessions and CSRF protection, plus third-party cookies (Google Analytics & Microsoft Clarity) for aggregate usage insights. You can refuse cookies via your browser or our on-site cookie banner; core cookies are essential for login and cannot be disabled.
8. Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production databases is restricted to authorised engineers via MFA. We conduct quarterly penetration tests.
9. International Data Transfers
When we transfer your data outside Singapore or the EEA, we rely on Standard Contractual Clauses or an adequacy decision. A copy of relevant safeguards can be provided upon request.
10. Children
SketchToImage Online is not directed at children under 13. We do not knowingly collect personal data from children. Parents who believe their child has provided data may contact us for removal.
11. Automated Decision-Making
Generation requests may be blocked automatically if they violate our Content Policy (e.g., hateful or sexual imagery). You may request human review of any automated decision that affects you.
12. Changes to This Policy
We will post any changes on this page and, for material updates, notify registered users by email at least 7 days in advance. Continued use of the Service after the effective date constitutes acceptance.