Privacy policy

What we keep

• Your account: your email address, name and profile picture (from Google if you sign in with Google), whether your account is approved, and when you last used Arcwhizz.
• The waitlist: the email address you leave, until you’re let in or ask us to remove it.
• Invites: if we email you an invite, the address we sent it to and when.
• Your work: the images you upload, the renders and edits made from them, your prompts, notes and markings, and your projects.
• Usage: a record of each image or text model run for you (which model, when, and what it cost), so we can see and limit costs.
• Shared links: the links you make, and comments on them, with the name the commenter gives.
• Feedback: what you send with the Feedback button — your message and any screenshots — with the page you were on and your browser’s name and window size.
• Technical data: our hosting keeps short-lived request logs, including IP addresses; the waitlist uses your IP address briefly to stop abuse.

Signing in with Google

When you sign in with Google we receive your name, email address and profile picture, and use them only to create your account and sign you in. We don’t ask for access to anything else in your Google account, and we don’t use Google user data for advertising or share it with anyone except the sign-in service below. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why

To run the service you signed up for (your account, your projects and the renders you ask for), to decide who gets in during the beta, to send the emails you asked for (waitlist and sign-in) and invites, to answer and act on your feedback, and to keep the service safe and its costs in check. We don’t sell your data, show ads or use tracking or analytics cookies.

Who processes it for us

• Vercel: hosting, image storage, and routing text requests to AI models.
• Neon: the database.
• Clerk: accounts and sign-in.
• Replicate, and the AI providers behind Vercel’s AI Gateway: they run the models, so they receive the images and prompts of each request.
• Resend: sends our emails.
• Google: only if you choose to sign in with Google.

Some of these companies process data outside the European Union, for example in the United States.

Cookies

Only the ones Arcwhizz needs to work: Clerk’s cookies keep you signed in; an invite link you accept is kept in a cookie for up to a week while you sign up; opening a password-protected link remembers that you unlocked it; and commenting on a shared link without an account keeps a random key so you can delete your own comments. Your editor settings are saved in your browser.

How long

As long as your account exists. Delete a project and its images go with it; ask us to delete your account and we delete it with everything in it. Usage records are kept with the account.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it, and you can complain to your local data protection authority. Write to hello@looop.express.