Privacy Policy

1. Summary

This summary is here to be read. The sections below say the same thing in full.

2. Who we are

Our apps are made by ivmar, Inc. For the limited data described in this policy, we are the data controller.

3. Definitions

App means any plugin or application we publish. Design Platform means the platform through which an App is distributed and inside which it runs. You means the person using an App.

4. What we do not collect

We do not collect:

• your designs, images, text, or any content you create — unless the Appendix for a specific App says otherwise;
• your name, email address, or postal address — except the billing details Stripe collects from you if you subscribe (see sections 5(b) and 8);
• your payment card details;
• your IP address for tracking or profiling purposes;
• behavioural or advertising profiles of any kind.

We do not use analytics services, advertising networks, tracking pixels, or tracking cookies. We do not sell or share personal data, and we never have.

5. What we do process

Unless the Appendix for a specific App says otherwise:

(a) In the editor, on your device

An App reads and writes the design content you select in order to do what you asked of it — for example, to align the elements you picked. This happens locally, inside the Design Platform's editor. This content is never transmitted to us, and we never receive it.

(b) On our servers

Where an App offers a paid plan, we process:

• a pseudonymous user identifier issued by the Design Platform — an opaque value that does not tell us who you are;
• a count of how many times you have used the free allowance;
• your plan status;
• if you subscribe, identifiers linking you to your customer and subscription records at Stripe;
• a short-lived, opaque checkout token, generated when you start an upgrade, that links your checkout to your account;
• a notification from the Design Platform when you remove an App — we keep the usage record described above, as explained in section 10.

(c) On your device

An App stores a copy of your plan status in your browser's local storage, so that it keeps working when our servers are unreachable. You can clear it through your browser at any time.

6. Legal bases

Where the GDPR or similar law applies, we rely on:

• Performance of a contract — to provide paid features and manage your subscription;
• Legitimate interests — to apply the limits of the free plan, to prevent those limits being circumvented, and to keep the service secure and working.

7. Permissions

Each App requests the fewest permissions it needs from the Design Platform. The permissions for each App, and the reason for each one, are listed in the Appendix for that App. The Design Platform shows you these permissions before you install, and you can remove an App at any time.

8. Third parties

• The Design Platform hosts the App and holds your account and your designs. Its own privacy policy governs those.
• Stripe, Inc. processes payments and holds subscribers' billing details, including name, email address and card information. We never receive or store your card details.
• DigitalOcean, LLC hosts our servers.

We use no advertising, analytics, or tracking service of any kind.

9. Where data is processed

We are a United States company, and the data described in section 5(b) is processed in the United States. Our service providers act under standard data protection terms. If you use an App from outside the United States, the limited data described in this policy is transferred to and processed in the United States.

10. How long we keep it

We keep the data described in section 5(b) for as long as necessary to provide the service and to apply the limits of your plan, including after you remove an App. We will delete it on request, except where we need to keep it to prevent circumvention of free-plan limits or to meet a legal obligation.

To request deletion, email support@ivmar.co.

11. Your rights

Depending on where you live, you may have the right to access your personal data, to correct or delete it, to receive a copy of it, to object to or restrict how we process it, and to withdraw consent. If you live in California or certain other US states, you have the right to know what we collect, to request deletion, to opt out of the "sale" or "sharing" of personal data — we do neither — and not to be treated differently for exercising these rights.

To exercise any of these, email support@ivmar.co. We will respond within the period required by the law that applies to you. We hold little that identifies you directly, so we may need you to make the request in a way that lets us identify the right record — for example, by sending the identifier the App displays, or, if you subscribe, the email address on your Stripe account.

Your designs, your account and your profile are held by the Design Platform, not by us. For requests about those, please contact the Design Platform, which is the controller of that data.

If you are in the EEA or the UK, you may also lodge a complaint with your local supervisory authority.

12. Security

Traffic between an App and our servers is encrypted in transit with TLS. We hold as little data as we can and limit who can reach it. No system is perfectly secure — but the less we hold, the less there is to lose.

13. Children

Our Apps are not directed at children. You must meet the minimum age set by the Design Platform's terms in order to use them. We do not knowingly process data from children.

14. Changes

We will update this policy when our Apps change. The effective date at the top of this page shows the current version. If we make a significant change, we will say so in the App or on this page.

15. Contact

Questions about this policy, or a request about your data: