Privacy

Browsing the library, editing a template and downloading it as a PNG or SVG all work signed out. Nothing you type into a template is sent anywhere until you choose to save it, and nothing about the design is stored on our side before then.

An account exists for one reason: so a design can be saved and opened again later.

If you make one, we hold:

• Your email address and password. The password is stored only as a hash by Supabase Auth, which means we cannot read it and neither can anyone else.
• Your brand, if you fill it in: name, phone number, email, website, brokerage, your colours and typefaces, and a logo and headshot if you upload them.
• Your saved designs: which template each is based on, the name you gave it, the text, colours and toggles you set, how you cropped any image, and the images themselves.

That is the whole list. There is no profile beyond it, no billing details — the library is free and takes no payment — and nothing is inferred about you.

Rows are in a Postgres database and images are in a private storage bucket, both run by Supabase on servers in the United States. The site itself is hosted by Vercel.

Your rows are readable only by your own account. That is enforced by the database rather than by the application: every query is filtered to your account id, so a request for somebody else’s designs returns nothing rather than being politely declined. Uploaded images sit under a folder named after your account id in a bucket that is not public, and the same rule applies to them — a file cannot be read by an account other than the one that uploaded it, and it has no public URL.

A logo, a headshot or a listing photograph you upload belongs to you. We claim no rights over it. It is stored so your designs can be drawn and exported, and used for nothing else: not to train anything, not to illustrate our own marketing, and never sold or shared.

We send email only when an action needs it: confirming a new account, resetting a password, or confirming a change of address. Those are sent through Resend, which handles delivery on our behalf.

The library sends no marketing email. Making an account here does not put you on a list.

The library sets no cookies and runs no analytics, advertising or third-party tracking scripts.

When you sign in, your session is kept in your browser’s local storage so you stay signed in between visits. It never leaves your browser except to authenticate you, and signing out removes it.

Settings has a Delete account control. It removes your account, every saved design, your brand, and every file you have uploaded. Images are cleared from storage first and the account itself last, so nothing is left orphaned behind a deleted login.

It happens immediately and cannot be undone. There is no grace period and no backup copy kept for you.

You can also delete a single saved design at any time without touching the rest of the account.

If this policy changes, the date at the top changes with it.

Questions about any of it: info@ilustrious.com.