Privacy Policy

This Privacy Policy explains how Holengen, LLC (“we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use Vector Fast AI (the “Service”).

1. Summary

Free vectorization runs locally: when you convert images to SVG without Starter background removal, the image processing happens in your browser.
Starter background removal is cloud processed: if you enable background removal, your image is sent to our API and processed by our cloud provider to generate an output PNG.
AI generation is cloud processed: prompts, settings, generated images, and related metadata are processed by our systems and third-party AI providers so we can create the requested output.
Accounts, Pro, and credits use account data: account sign-in, credit balances, subscriptions, and generation history are tied to your VectorFast account.
Payments are handled by Stripe: we use Stripe to process payments and verify purchases.
Product analytics (optional): we may use PostHog to understand how the Service is used and to improve it. We honor Do Not Track (DNT) when it is enabled in your browser.

2. Information we collect

2.1 Information you provide

Receipt email and license token: used to verify your Starter purchase, restore access, and enable Starter features.
Account information: when you create or use an account, we process information such as your email address, authentication identifiers, credit balance, subscription status, and billing-related metadata.
Images you submit for background removal: when you use Starter background removal, you provide an image to be processed.
AI generation inputs and outputs: when you use AI image generation, we process your prompt, selected model, settings, generated image, revised prompt when provided by a model provider, credit cost, and generation status/history.

2.2 Information collected automatically

Device and log data: like IP address, user agent, and request metadata may be processed by our hosting and security providers.
Local device storage: the Service stores some settings on your device (for example theme preference, and your Starter license token) using browser storage such as localStorage. Some UI state may be stored via cookies.

3. How we use information

Provide and operate the Service, including AI generation, background removal, SVG export, credit balances, and generation history.
Verify purchases, manage subscriptions and credits, and prevent abuse of paid features.
Maintain security, prevent fraud, and debug issues.
Process payments, invoices, refunds, chargebacks, and tax or compliance records.
Improve product quality, reliability, and user experience.
Comply with legal obligations and enforce our Terms.

Where GDPR applies, we process personal data under one or more of these legal bases: (a) performance of a contract (providing the Service and Starter features), (b) legitimate interests (security, fraud prevention, product improvement, debugging), and (c) compliance with legal obligations. Where required, we will obtain consent (for example for certain analytics or marketing cookies).

We may share personal information with:

Stripe (payment processing, subscription billing, purchase verification, refunds, and chargeback handling).
Cloudflare (hosting, content delivery, image processing, and storage infrastructure).
Supabase (authentication, account data, entitlements, credit ledger, subscription status, and related database services).
AI model providers such as OpenAI and Google/Gemini when you request AI image generation.
Service providers that help us run the Service (e.g., error logging or security tools), if and when used.
Legal and compliance recipients when required by law or to protect rights and safety.

6. International transfers

Our service providers may process data outside your country. Where required, we use appropriate safeguards for international transfers (such as Standard Contractual Clauses).

7. Data retention

Background removal inputs: we do not intentionally store the images you submit for background removal on our servers beyond what is needed to process and return the result. Our providers may retain data temporarily for operational or security purposes.
Purchase verification: we may retain limited purchase verification information (such as receipt email) for as long as needed to provide Starter and to prevent fraud.
Account, billing, and credits: we retain account, subscription, credit ledger, checkout, invoice, and webhook records for as long as needed to operate paid features, resolve disputes, prevent fraud, and meet legal or tax obligations.
AI generation history: generated images and related history may be stored so you can reopen, download, or continue previous work. You may delete individual history items where the product provides that option, subject to backups, logs, provider retention, and legal or security requirements.
On-device storage: theme settings, license tokens, and some UI preferences remain on your device until you clear them (e.g., using “Sign out” or clearing browser storage).

8. Your rights

8.1 GDPR/EEA/UK/Swiss users

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability. You may also lodge a complaint with a supervisory authority.

8.2 California users (CCPA/CPRA)

We do not “sell” or “share” personal information as those terms are defined under the CCPA/CPRA. California residents may have rights to know, delete, and correct personal information, and to not be discriminated against for exercising privacy rights.

9. Analytics (PostHog)

We may use PostHog for product analytics to understand how the Service is used and to improve performance and reliability. This may include page views and feature interactions, plus approximate location derived from IP address. Where supported, we honor Do Not Track (DNT). We do not send raw receipt emails to PostHog; if Starter is activated, we may use a hashed form of the normalized receipt email to connect Starter feature usage and related service events. Where required, we will provide a cookie/analytics notice and obtain consent before setting non-essential cookies or similar technologies.