Privacy Policy
Last updated 29 July 2026.
Draft — pending review. This page was written from a technical audit of what the application actually does. The facts in it have been verified against the code, but it has not been reviewed by a lawyer.
The short version
Who is responsible for your data
The data controller for this site is Cristian Istrate, an individual operating as a sole trader, based in Bragadiru, Romania. For any privacy question or request — including access, correction, erasure, or a request for the full registered address — contact support@visual-ideas.eu.
Using the editor without an account
No account is required and none is created. When you use the editor as a normal visitor we do not collect your name, email address, or any other identifying information, because there is no mechanism in the product that asks for or transmits it.
Your email designs, saved templates, social media calendar entries and analytics, and interface preferences are all written to your own browser's local storage. None of this is sent to our servers unless you create an account and use a feature that specifically requires one (described below). We cannot read, recover, or delete them for you — clearing your browser data removes them permanently. The exact storage keys are listed in the Cookie & Storage Policy.
If you sign in with Google
Signing in is optional and is not required to use the editor. Signing in with a Google account is required for: cloud sync of your email templates and social calendar data, hosted image uploads (images used in your email designs, and post images for your social calendar entries), sending emails through your own configured SMTP server, and generating carousel decks with AI (available to Pro subscribers, with a monthly usage limit — see "AI-generated content" below). Signing in on its own does not start a subscription and does not cost anything.
Sign-in uses Google via Firebase Authentication, requesting only Google's default profile and email scopes. No additional permissions are requested, so we receive no access to your Gmail, Drive, contacts, or calendar. From Google we receive:
- Your email address
- Your display name
- Your profile photo URL
- A Google account identifier (a unique user ID)
- Whether your email address is verified by Google
Signing in creates a record holding exactly those fields plus which tier your account is on. It is kept so you can sign in again and so a subscription has somewhere to attach. Nothing else about you is stored at sign-in, and a free account stores no designs on our servers at all — those stay in your browser.
Designs stored in the cloud (Pro subscribers only)
If you're a Pro subscriber and choose to sync your work, we store: your email templates and designs, your social media calendar clients, entries, and manually-entered analytics, any images you upload for either tool, and the carousel decks generated for you by the AI carousel builder (including the generated LinkedIn caption text). Generated decks are automatically and permanently deleted 90 days after creation. We also retain a usage counter (how many AI generations you've used this month) to enforce your plan's monthly limit, separately from the decks themselves. Security rules enforce that only your own account can read or write your records; no other user can access them.
nam5 multi-region, which is in the United States, and the supporting Cloud Function runs in us-central1. Despite the .eu domain name, tester data is processed outside the EU, relying on Google's Standard Contractual Clauses and its EU–US Data Privacy Framework certification. This is the arrangement for the foreseeable future — no migration to an EU region is planned. If that ever changes, this page will be updated before any data is moved.AI-generated content
The carousel builder's AI generation feature (Pro subscribers only, with a monthly usage limit) processes the URL or text you submit, along with any webpage content we fetch on your behalf, to generate carousel content using a third-party AI provider. If you're a Pro subscriber, the generated deck (including its content and the generated LinkedIn caption) is saved to your account for 90 days so you can revisit or reuse it, then automatically and permanently deleted. You can also choose not to rely on this — nothing prevents you from exporting and keeping your own copy immediately after generation. You're responsible for only submitting URLs or content you have the right to use — see the Terms of Service for more on this.
If you subscribe to Pro
Pro is €7.99 per month and applies to your whole account — it's not priced per tool. It includes cloud sync and image uploads for the email builder and social calendar, SMTP sending, the Pro-only starter email templates, and AI-powered carousel generation (up to 20 generations per month). Pro is billed by Stripe. When you start an upgrade we create a Stripe customer record holding your email address and your account identifier, and send you to Stripe's own hosted checkout page to pay.
Your card number, expiry, and security code are entered on Stripe's page and are never transmitted to, processed by, or stored on our servers — we have no code that can read them. What comes back to us is a notification that a subscription started, changed, or ended, and we store on your account record the Stripe customer and subscription identifiers plus the date Pro began. That is the whole of the payment data we hold.
Third parties that receive data
Using the site necessarily involves these providers:
- Google (Firebase Hosting)Serves the website. Like any web server, it processes your IP address and browser user-agent in its request logs.
- Google AnalyticsOnly if you accept it in the consent banner. It then reports page views to Google and sets two _ga cookies. Decline and the script is never loaded, so nothing is sent and no cookie is set. This is the only analytics on the site.
- Google FontsThe site loads the Inter and JetBrains Mono typefaces from fonts.googleapis.com and fonts.gstatic.com. This exposes your IP address to Google when the page loads. Self-hosting the fonts would remove this transfer.
- Google (Firebase Authentication & Firestore)Only when you choose to sign in. Firestore additionally stores your synced designs if you subscribe to Pro, as described above.
- StripeOnly if you buy a Pro subscription. Checkout happens on Stripe's own hosted page — your card number is entered there and never reaches our servers or our code. Stripe receives your email address and payment details and tells us only that a subscription started, changed, or ended. Stripe is a US company and acts as an independent controller for its own fraud-prevention and compliance purposes.
- placehold.coThe built-in starter templates reference placeholder images from this service. Those requests occur in the editor preview and would also occur for recipients if you send a design without replacing the placeholder images.
Note for review: the Google Fonts transfer has been the subject of GDPR enforcement in Germany. Self-hosting the two font families would remove this third-party request entirely.
Analytics and tracking
There is none. This site runs no analytics product, no tag manager, no advertising or remarketing pixels, and no third-party tracking scripts of any kind. We do not measure page views, we do not build a profile of you, and we do not share data with advertisers. This was verified against the application source: there is no Google Analytics measurement ID, no analytics SDK, and no tracking tags.
Your rights under the GDPR
If you are in the EU or UK, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to its processing. You may also lodge a complaint with your national supervisory authority.
In practice, for the overwhelming majority of visitors we hold no personal data at all, so there is nothing to access or erase on our side — your designs are yours, on your device, and clearing your browser data erases them immediately and completely.
If you have an account, you can delete it and everything stored under it yourself from the dashboard at any time. You can also request access to or deletion of your stored designs and sign-in record by contacting support@visual-ideas.eu. We will respond within one month as required by Article 12.
Legal basis. Where we process data because you signed in, the basis is your consent, which you may withdraw at any time by signing out and deleting your account. Analytics is likewise consent-based, given or refused in the banner and withdrawable by clearing your browser data. Where we process data to run a Pro subscription you bought — your account record, your synced designs, and the billing relationship — the basis is performance of a contract with you. Server request logs are processed on the basis of legitimate interest in operating and securing the site.
Data retention
Designs in your browser. Without an account, and on the free tier, your designs and saved templates are written only to this browser's localStorage. They persist until you clear them, and we have no involvement in or visibility of that — we cannot read, recover, or delete them for you.
Data on your account. If you have an account, your account record is retained until you delete it. On Pro, that also covers the designs you sync to Firestore and the images you upload to Storage. You can delete the account yourself at any time from the dashboard, which erases your uploaded files, your synced designs, and the account record itself.
Billing records. Stripe retains payment and invoice records independently of us, for as long as its own legal and tax obligations require. Deleting your Visual Ideas account does not erase those.
Server logs. Google's default retention period applies to Firebase Hosting request logs; we have not configured custom log retention.
Children
This tool is not directed at children and we do not knowingly collect data from anyone under 16, the baseline age of consent under the GDPR. Some member states set a lower threshold; we apply 16 regardless.
Changes to this policy
If this policy changes materially, the updated date at the top of the page will change. We run no marketing mailing list and will not email you about the product, so a visitor without an account will not be notified directly. If you hold a Pro subscription, we will send notice of a material change to the email address on your account.
Separately from this policy, Stripe sends transactional billing email — payment receipts, invoices, and failed-payment notices — to Pro subscribers. Those are part of running the subscription, not marketing, and cannot be unsubscribed from while a subscription is active.