Security & Data Privacy

Privacy Policy

Our commitment to user data protection, image privacy, and architectural transparency across the Cloudflare Edge network at RemoveSVG.com.

Effective Date: January 1, 2025 • Last Updated: April 15, 2025 • Architecture: Enterprise Cloudflare Edge

Core Principle: Zero-Retention (We Never Store Your Images)

All images uploaded for Vectorization (SVG), Background Removal, Sharpening, or WebP conversion are handled ephemerally in RAM on Cloudflare Edge Workers. We DO NOT store your images on permanent disk storage, DO NOT use your assets to train public AI models, and all binary data is automatically discarded immediately after processing completes.

1. Information We Collect & Scope

RemoveSVG.com ("we", "our", "the Service") operates an online image transformation and vectorization platform. We collect the absolute minimum data required to deliver high-quality services:

  • Account Credentials: Email address, display name, and subscription tier (User, Pro, Admin) when registering an account.
  • Credits & Transaction Ledger: Credit consumption and purchase history recorded in our distributed Cloudflare D1 database.
  • Telemetry & Security Data: Client IP address (CF-Connecting-IP), Edge PoP identifier (Ray ID), and browser user-agent strictly for DDoS prevention, rate limiting, and CDN optimization.

2. Image Processing & Intellectual Property Rights

When utilizing any tool in the RemoveSVG suite:

  • 100% Ownership: You retain full copyright and intellectual property rights over your original images and the generated output files (SVG vector paths, sharpened graphics, transparent WebP).
  • No Data Commercialization: We never sell, lease, or share your visual media with third parties or advertising brokers.
  • Ephemeral TTL: In-flight memory buffers exist for a maximum of 60 seconds during processing. Once your download starts or the browser session ends, all temporary binary data is completely purged.

3. Infrastructure Security & Cryptography

RemoveSVG is architected on enterprise-grade Cloudflare cloud infrastructure:

  • Transit Encryption (TLS 1.3 / HTTPS): All communication between your browser and our edge workers is secured via modern TLS 1.3 encryption.
  • Cloudflare D1 Encryption at Rest: User profiles and ledger entries are encrypted at rest using AES-256 across distributed data centers.
  • Session Authentication: Authentication sessions utilize secure cryptographic tokens with HttpOnly, Secure, and SameSite protection against XSS and CSRF.

4. GDPR & CCPA Compliance (Your Rights)

Regardless of whether you are located in the European Union (GDPR), California (CCPA), or worldwide, we guarantee your statutory data rights:

Right to Access View your account profile, usage history, and credits ledger at any time from your account dashboard.
Right to Erasure Request permanent deletion of your account credentials, email, and associated D1 records at any time.
Data Portability Export your conversion metrics and SVG vector assets in open, industry-standard formats.

5. Cookies & Local Storage

RemoveSVG uses strictly essential storage techniques (Essential Cookies & LocalStorage) solely to:

  • Maintain your authenticated user session securely.
  • Persist your client-side preferences (such as curve smoothness, threshold, and sharpening values) in your own browser.
  • We DO NOT utilize third-party cross-site advertising or tracking cookies.

6. Contact Information & Data Protection

For privacy inquiries, data subject requests, or technical audits, reach out directly to our Data Protection team:

Data Protection Office
privacy@removesvg.com
Official response time within 24 to 48 business hours.
← Back to Image to SVG Tool View Terms of Service →