Privacy Policy

Who is responsible for your data

ImageToMermaid is operated by TensorHub Solutions Inc., an Alberta, Canada corporation with its registered office at 9433 100A St NW, Edmonton, Alberta T5K 0V4, Canada. We are the organisation responsible for the personal information described below (the "controller" for the purposes of the GDPR and UK GDPR).

What we collect

When you use ImageToMermaid, we collect the minimum data needed to provide the service:

• Account information (email address) when you sign up or buy a credit pack
• Images you upload for conversion (see “Image data” below)
• Usage data (number of conversions, and credit balance)
• A one-way hash of your IP address, used only to cap automated abuse. We do not store raw IP addresses
• Basic analytics (page views, feature usage) to improve the product

How we use your data

• To convert your images into Mermaid.js code
• To manage your account and usage limits
• To process payments when you buy a credit pack
• To send transactional emails (for example, a sign-in link or a purchase confirmation)
• To improve the product based on aggregate usage patterns

Third-party services

We use the following services to operate ImageToMermaid:

• OpenAI — processes uploaded images to generate Mermaid code
• Anthropic — processes uploaded images as a fallback when OpenAI is unavailable
• Supabase — authentication and database
• Stripe — payment processing
• Cloudflare R2 — image storage
• Vercel — hosting
• Resend — transactional emails
• Sentry — error monitoring. We strip email addresses and IP addresses before reports are sent

Neither OpenAI nor Anthropic uses data submitted through their APIs to train their models.

Image data

Images you upload are sent to OpenAI — or to Anthropic if OpenAI is unavailable — to be converted. We do not use your images to train any models.

Images uploaded without an account are deleted automatically within 24 hours. Images uploaded while signed in are currently retained in our storage so that we can support and debug your conversions; you can request deletion at any time by emailing support. For signed-in conversions we also keep a record of the generated Mermaid code and the detected diagram type.

Cookies

We use two kinds of essential cookie and nothing else. One keeps you signed in. The other is a random identifier that lets us count free conversions from a browser that is not signed in, so the free tier can be enforced. Neither is used for advertising and we do not use third-party tracking cookies.

Where your data is processed

We are based in Canada, and the services listed above process data in Canada, the United States and the European Union. Where personal information is transferred out of your country, we rely on the safeguards offered by those providers, including the European Commission's Standard Contractual Clauses. Canadian private-sector privacy law (PIPEDA) has been recognised by the European Commission as providing an adequate level of protection for commercial organisations.

Your rights

You can ask us to access, correct, export or delete your personal information, and you can request deletion of your account at any time, by emailing support@imagetomermaid.com. We will respond within 30 days.

If you are in the EU or UK you additionally have the right to object to or restrict processing, to withdraw consent, and to lodge a complaint with your local supervisory authority. If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada. We rely on the performance of our contract with you to run the service, and on our legitimate interests to keep it secure and to understand how it is used.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions? Reach us at support@imagetomermaid.com, or by mail at TensorHub Solutions Inc., 9433 100A St NW, Edmonton, Alberta T5K 0V4, Canada.