Privacy Policy

Anjin Ltd, trading as Anjin Design, is the data controller for the personal data described here. Contact us at privacy@anjin.design.

• Account data — your email address, name and workspace name.
• Billing data — handled by Stripe. We never see or store your card details. We hold a Stripe customer identifier, your plan, and your credit balance and transaction history.
• Content you upload — templates, images, font files, and the images you render. These may contain personal data if you put it there; that is your decision and your responsibility.
• Usage data — render records, which API key made them, timestamps, and error records. This is how billing is auditable and how we debug failures.
• Email delivery — transactional messages (sign-in links, billing notices) are sent via Resend, which processes your email address and the message.
• Site analytics — only if you agree to it. If you accept analytics cookies, Google Analytics receives your IP address, your device and browser type, and the pages you view. If you decline, or never answer, none of this is collected and Google is not contacted at all. See /cookies.

We do not sell your data, we do not use your content to train models, and we do not share it with advertisers.

• Contract — to give you the service you signed up for and to bill you for it.
• Legitimate interests — to keep the service secure, prevent abuse, and understand and fix faults.
• Legal obligation — to keep financial records for the period the law requires.
• Consent — for analytics cookies, and for marketing email if you ever opt in. Each is asked for separately, and you can withdraw either at any time without affecting the other or the service itself.

• Account data — for as long as your account exists, then deleted within 90 days of closure.
• Content you upload — until you delete it, or within 90 days of account closure.
• Rendered output — we may introduce a retention period on at least 30 days' notice; keep your own copy of anything you need permanently.
• Billing and credit records — retained for as long as tax and accounting law requires, currently six years.
• Usage and error records — retained for up to 12 months for debugging and abuse prevention.

Only the sub-processors we need to run the service. The current list, what each one does and where it operates, is published at /sub-processors. We publish a sub-processor there before it begins processing your data, so the list changes before the change takes effect, not after. If you have a contract with us and object to a new one, email privacy@anjin.design.

Our infrastructure is operated by providers who may process data outside the UK. Where that happens, transfers rely on the UK International Data Transfer Addendum, the UK Extension to the EU Standard Contractual Clauses, an adequacy decision, or the UK Extension to the EU–US Data Privacy Framework (the “UK–US Data Bridge”). Analytics is contracted with Google Ireland Limited, which may route data to Google LLC in the United States under that framework.

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to that use — and you can ask for it in a portable form. Email privacy@anjin.design and we will respond within one month.

If you are unhappy with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.

Every account’s data is isolated at the database level, API keys are stored hashed and are individually revocable, and card data never reaches our servers. The detail is at /security.

Essential cookies keep you signed in and the service secure. We also use Google Analytics, but only if you agree — nothing is loaded and no analytics cookie is set until you accept, and you can withdraw at any time. Full detail, and the control itself, at /cookies.

If we change this policy materially we will tell you by email or in the application before it takes effect. The date at the top always reflects the current version.