Privacy policy

What we store

• Your account — email address, and the identifier from your sign-in provider if you used one. We never see or store your password when you sign in with Google.
• Your usage — the URLs you submit, the documents generated from them, the export files, and a record of credits added and spent.
• Operational logs — errors and timings. Logs are redacted before they are written: credentials, cookies, authorization headers, signed URLs, prompts and generated content are stripped, and email addresses are removed.

We do not store card numbers. Payments are handled by Stripe and card details never reach our servers.

Who else processes it

• Supabase — database, authentication and file storage.
• OpenAI — generates the written analysis. The measurements taken from the page you submitted are sent to it; your email address and account identifiers are not.
• Stripe — payments. Stripe receives your email address to issue a receipt.

These providers process data on servers that may be outside your country. We do not sell personal data, and we do not use your generated documents to train anything.

Pages you submit

When you submit a URL we load that page as a visitor would and measure its design. We do not retain a copy of the page’s content — what we keep is the measurements and the document generated from them, plus a screenshot used for the preview.

Generated design systems are private by default. Publishing one to the public catalog is a choice you make per design, and you can unpublish it at any time.

How long we keep it

Account data and your generations are kept while your account is open. If you ask us to delete your account we remove your generations and files.

Records of credits and payments are kept after that. We are required to retain transaction records, and they are also how we can answer a question about what you were charged — so they survive account deletion, tied to the payment rather than to a profile.

Backups are taken every six hours and kept for 14 days, so deleted data can persist in a backup for up to that long before it ages out.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hi@designmd.website from the address on your account and we will action it. If you are in the EU or UK you have these rights under the GDPR, and you can complain to your data protection authority.

Cookies

We set cookies to keep you signed in. That is all they do — there is no advertising or third-party analytics tracking on this site.