Privacy Policy

1. Who we are

Vignelli is operated by IIID.CO Creative Studio, Fort Lauderdale, Florida. This policy explains what we collect, why, and what you can do about it. The short version: we collect what the product needs to work, we don't run analytics or ad tracking, and we never sell personal data.

2. What we collect

• Account data — email (plus a normalized form used to prevent duplicate accounts), password hash, business name, optional website URL.
• Workspace content — your brand assets, uploaded and extracted images, fonts, logos, and guidelines PDFs.
• Prompt-attached photos — images you attach to a specific generation. Stored with that draft and deleted automatically after 30 days; they never join your brand library.
• Generation data — prompts, brand snapshots, AI outputs, and token/cost/latency telemetry.
• Feedback — if you send in-app feedback, we keep the text with your account, the page you sent it from, and a small snapshot of what you were working on.
• Usage data — generation counters and IP addresses used for rate limiting.
• Session data — authentication cookies.
• Cached site content — pages of the website you submit, cached briefly to build your assets, then expired automatically.

3. How we use it

To provide the service (build your assets, generate and store your graphics), to send transactional email (verification, welcome, password reset — never marketing you didn't ask for), to enforce rate limits and prevent abuse, and to understand cost and reliability of AI generation. That's the whole list.

4. Who processes it

• Cloudflare — hosting, database, storage, and rendering infrastructure.
• Anthropic — AI processing: site content, screenshots, brand data, and prompts are sent to the Claude API for analysis and generation.
• Resend — transactional email.
• Google — sign-in with Google, only if you use it.
• Stripe — payments, when paid plans launch. No payment data is collected today.

These providers process data only to run Vignelli. We do not sell or share personal data for advertising.

5. Cookies

Strictly functional only — session authentication. No analytics or advertising cookies. If analytics are ever added to this site, this section changes first.

6. Retention and deletion

Delete your account any time from Settings; your login and workspace access end immediately, and workspace content is removed from our systems within 30 days. Cached site content and prompt-attached photos expire automatically. Generation telemetry is retained for service operation and abuse prevention. To confirm or expedite deletion, email create@vignelli.io.

7. Your rights

You can access and correct your account data in Settings, export your brand assets and graphics from the product, and delete your account entirely. Wherever you are, you can also email us to request a copy of your personal data, correction of something we hold, or deletion — we honor these requests regardless of jurisdiction and respond within 30 days. If we ever cannot fulfill a request, we will tell you why.

8. Security

Passwords are stored as salted hashes, transport is encrypted, and workspace data is isolated per account. No system is perfectly secure; if a breach affects your data, we will notify you promptly.

9. Children

Vignelli is for business use by people 18 and older. We do not knowingly collect data from children.

10. Changes and contact

If this policy changes materially, we will notify you by email or in-app before the change takes effect. Questions or requests: create@vignelli.io.