Privacy Policy
This Privacy Policy explains how DesignTech AI collects, uses, shares, and protects information when customers and authorized users access the platform.
Last updated: June 11, 2026
1. Scope
This Privacy Policy explains how DesignTech AI collects, uses, shares, and protects information when customers and authorized users access the DesignTech AI platform.
This policy applies to information processed through the DesignTech AI application, support interactions, and related customer operations. It should be read together with any applicable customer contract, data processing addendum, and subprocessor register.
2. Information We Collect
We may process account and identity data such as name, email address, authentication identifiers, and organization affiliation.
We may process customer content and assets uploaded to the platform, including documents, images, video, text, metadata, and workflow configuration.
We may also process integration data from connected third-party systems and operational metadata such as workflow runs, audit events, API activity, timestamps, and support diagnostics.
3. How We Use Information
We use information to provide and operate the platform, authenticate users, enforce access controls, process customer content through configured workflows and AI services, and support service reliability and compliance obligations.
We may also use operational metadata for troubleshooting, customer support, security review, and service administration.
4. AI Processing
The service includes AI-assisted workflows. The current production path sends AI requests directly to Google Vertex AI, including Gemini models and Anthropic Claude models served through Vertex AI, with no third-party AI request-routing intermediary.
Customer content is processed to fulfill requested operations. AI model execution runs on Google Cloud infrastructure under that provider's data processing terms.
Customers requiring contractual commitments on AI processing, training restrictions, or regional deployment should rely on the applicable order form, DPA, and supporting diligence documents.
5. How We Share Information
We share information only as necessary to operate and support the service, including with subprocessors and service providers used for hosting, database operations, file and media storage, and AI model execution.
As of the current production review, the baseline providers for these functions are Render (hosting), Supabase (managed Postgres), Google Cloud Storage (file and media storage), and Google Cloud / Vertex AI (AI model execution). Search and content indexing run natively in Postgres, with no third-party search service.
A current subprocessor register should be used for customer diligence and contractual review.
6. International Transfers
The service relies on providers operating in multiple regions. Data may therefore be processed in the United States or other jurisdictions where the in-scope providers operate.
Customers with specific regional or transfer requirements should ensure those requirements are captured in the applicable contract documentation.
7. Retention
Retention periods depend on the type of data and the relevant system of record. DesignTech AI does not apply a single universal retention period to every class of customer data.
Detailed full execution payload logs used for operational troubleshooting are retained for a short default period in the current implementation. Other data sets, such as content, assets, account records, and search indexes, follow different lifecycle rules.
Customers should use the applicable retention schedule and contract documents for any definitive retention commitment.
8. Security
DesignTech AI relies on a combination of application controls and managed service provider security controls. Additional implementation detail is available in the current Security Overview and customer diligence documents.
9. Customer Rights and Requests
Customers may request access, export, correction, or deletion assistance through their account team or support channels, subject to applicable law and contractual responsibilities.
Where DesignTech AI acts as a processor on behalf of a customer, the customer remains responsible for handling data subject requests and providing lawful instructions.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the service, subprocessors, legal requirements, or internal controls.