Privacy policy

Accounts and Google sign-in

We process your email address, display name, account identifier and authentication records to create your account, sign you in, protect access to your workspace, and send account verification or recovery emails. Password authentication is handled by Supabase Auth when the hosted login integration is enabled. Existing password accounts use stored password hashes while they migrate; passwords are not stored as plain text.

If you choose Google sign-in, Google supplies your email address, basic profile information and a provider identifier. Supabase Auth processes that identity to establish your session. We request only openid, email and basic profile access. Google sign-in does not give Archifyi access to Gmail, Google Drive, contacts, calendars or other Google account content.

Google sign-in data is used for authentication, account identification and related account features. It is not sold, used for advertising, or sent to our diagram-generation model for training. Archifyi’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Diagram inputs and saved projects

We store project descriptions, submitted inputs, diagram graphs, generated HTML, versions, credit history and sharing settings so you can create, refine, revisit, download and share your work. Connections mode renders explicit relationships without sending your input to a model. Public repository import requests a bounded set of public files from GitHub. When you choose AI generation or refinement, the description, relevant current diagram and bounded repository excerpts are sent to the configured Google Gemini service.

Projects are private to your account by default. Creating a share link makes the selected version available to anyone with that link. You can revoke the link; copies already downloaded by recipients cannot be revoked.

Payments and operational records

Stripe processes payment information on its hosted checkout and billing pages. Archifyi stores the customer and subscription identifiers, billing period, payment confirmation and entitlement history needed to operate subscriptions. Archifyi does not receive your full card number. The shared payment merchant may appear as TubePrompter, as explained in checkout.

Service providers also process technical connection and service logs. Archifyi keeps generation status, provider usage estimates, rate limits and security-related records to operate the service, handle errors and protect accounts. These records are separate from website analytics.

Website analytics and cookies

Vercel Web Analytics measures page views and a fixed set of actions such as starting registration, completing generation or opening checkout. Analytics use generic workspace and share route labels. We remove URL query strings and fragments and do not send emails, account IDs, project IDs, prompts, graph contents, repository addresses, share tokens or raw errors as analytics properties. Tracking is skipped when Do Not Track or Global Privacy Control is enabled.

Authentication uses necessary cookies to keep you signed in and protect short-lived login or recovery flows. Our Vercel Web Analytics integration does not use analytics cookies. See Vercel’s Web Analytics privacy information.

Service providers and processing locations

Vercel hosts the website and application functions; Supabase hosts authentication and the application database; Google supplies optional sign-in and Gemini processing; Resend delivers account emails when configured; Stripe processes billing; and GitHub serves public files when you submit a repository. These providers process the information needed for their respective features. Our selected application functions and database are hosted in the United States; providers may process information in other locations under their own policies.

We do not sell account or project information or use it for targeted advertising. We may disclose information when necessary to comply with a legal obligation, protect the service or its users, or at your direction, such as when you share a diagram.

Retention and your choices

Saved projects remain available until you delete them. Project deletion removes the active project, saved versions and share links. Billing, credit, security and AI usage records may remain after project deletion. Provider logs and backups can have separate retention periods; deletion from the active application does not promise immediate erasure of every backup or external copy.

You can download diagram HTML or graph JSON, delete projects, revoke sharing links and sign out from your workspace. You can remove the Google connection through your Google account’s third-party access settings. For account access, correction or deletion requests, email chishan463@gmail.com; we may need to verify ownership before acting. No account-deletion button or automatic retention deadline is currently provided.

Policy updates

We will publish updates on this page with a revised date when the service’s data practices change. The product and data page describes the workspace, plans and currently configured features.