SVG Me
Legal

Privacy Policy

Last updated: October 20, 2026

This policy explains what SVG Me (“we”, “us”) collects when you use the SVG Me image-to-vector converter, how we use it, and the choices you have. SVG Me converts raster images into SVG vector graphics; we collect only what we need to do that, sell credits, and keep your projects.

What we collect

  • Account information. When you sign in with Google or with an email and password (through Google Firebase Authentication), we receive your email address, whether it is verified, and an account identifier. With Google sign-in we do not receive your contacts, files or any other Google data. We also record when your account was created and last used.
  • Your images and results. The image you upload is processed in memory to create the vector and is discarded after at most 30 minutes of inactivity; we do not store original uploads. The SVGs we produce, their file name, size and dimensions, and your color edits are saved to your projects.
  • Purchases. Payments are handled by Stripe. We never see or store your card number. We keep a record of each purchase (the Stripe checkout reference, the number of credits and the date) and a history of how your credits were added and spent.
  • Promo codes. When a code is redeemed we record the code, the account (if signed in) and the IP address, to prevent abuse.
  • Developer API. If you create API keys, we keep each key's name, a one-way hash of the key (never the key itself), and when it was created, last used and revoked. For each image you convert through the API we record the settings, the file name, the IP address and the result, and count your requests to enforce rate limits. An image sent to the asynchronous jobs endpoint is stored until its job finishes and is then deleted; an image sent to the synchronous endpoint is only held in memory. Deleting your account revokes your keys and removes your API job records.
  • API waitlist. If you joined the former waitlist for our developer API, we keep your email address, your answers about how you would use it, how you first found SVG Me and, if you were signed in, your account, to tell you about the API and decide what to build. Ask us to remove you at any time; deleting your account removes a waitlist entry made while signed in.
  • Sign-up bonus. When a new account receives its free credits, we keep a one-way hash of its email address, even after the account is deleted, so the bonus can be claimed only once per person.
  • Usage analytics. We use Google Analytics to count visits and see which pages and features are used: the pages you view, the site or campaign link that brought you here, general device, browser and approximate location (country or city), and events such as starting an upload, finishing a conversion, creating an account, redeeming a code or buying credits. We do not send Google your email address, your images or your SVGs. In the European Economic Area, the United Kingdom and Switzerland, analytics cookies are set only if you accept them; elsewhere they are on unless you opt out. Without them, Google receives only cookieless signals that cannot recognize you across visits.
  • Ad measurement. We advertise on Google Search. If you arrive from one of our ads, the link carries a click identifier (gclid), which we keep with how you first found SVG Me. When analytics cookies are allowed, Google uses it to tell us whether an ad led to a conversion, a sign-up or a purchase. We do not use it for ad targeting or remarketing.
  • How you found us. When you create an account, we save the campaign link parameters (such as utm_source and gclid), referring site and first page you visited in this browser with your account, so we can tell which communities and pages bring people who find SVG Me useful.
  • Technical data. Our servers and our network provider keep standard request logs (such as IP address, browser and time) for security and troubleshooting.

We do not use cookies for ad targeting or remarketing, and we do not sell or rent your personal information. Google’s cookies measure only whether our own ads led to a visit, a sign-up or a purchase.

How we use it

  • To convert your images and show previews.
  • To keep your account, projects, credit balance and purchase history.
  • To process payments, send receipts (through Stripe) and verify your email address (through Firebase).
  • To understand how people find and use SVG Me, and improve it.
  • To prevent fraud and abuse, keep the service secure, and meet legal and accounting obligations.
  • To answer you when you contact us.

Who we share it with

We share data only with the service providers that run SVG Me for us, and only for that purpose:

  • Google Firebase — sign-in and email verification.
  • Google Cloud — hosting, databases and storage of your SVGs.
  • Stripe — payments, tax calculation and receipts.
  • Cloudflare — network delivery and protection against attacks.
  • Google Analytics — usage analytics, as described above. Advertising features are turned off.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or of SVG Me.

How long we keep it

  • Uploaded images: in memory only, for at most 30 minutes of inactivity.
  • Locked projects (not yet unlocked with a credit): 30 days.
  • Unlocked projects: until you delete them or your account.
  • Purchase and credit records: kept after account deletion, as long as needed for accounting, tax and legal purposes.
  • The hashed email behind a sign-up bonus: kept after account deletion, to prevent repeat claims.
  • Google Analytics data: up to 14 months.

Your choices

  • You can delete any project from My SVGs.
  • You can delete your account from your account page. This removes your projects and email address; purchase records are kept as described above.
  • You can allow or turn off analytics cookies, and change your choice at any time below.
  • You can ask us for a copy of your data, or to correct or delete it, by emailing [email protected].

Storage in your browser

We use your browser’s local storage to keep you signed in (Firebase) and to remember results you created before signing in, so they can be added to your account, and to remember your analytics choice and how you first found SVG Me. When analytics cookies are allowed, Google Analytics sets its own cookies (named _ga) to recognize your browser across visits, and Google Ads may set a conversion cookie (named _gcl_aw) if you came from one of our ads.

Children

SVG Me is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

If we change this policy we will update the date above. For significant changes we will make reasonable efforts to let you know, for example by a notice in the app or by email.

Contact

Questions or requests about your privacy: [email protected].