1. Scope
Stylo (“Stylo”, “we”, “us”) provides the AI-native canvas available at stylo.design and its related applications and services (the “Service”). This policy covers information we handle when you visit our marketing site, create an account, use the canvas, or contact us.
It does not cover third-party websites or services that we link to, or that you choose to connect to the Service. Those services handle your information under their own policies.
2. Information we collect
Account information
When you create an account we collect your email address, display name, and a password. Passwords are stored only as a salted hash, never in readable form. You may also add a profile image. If you sign in with Google, we receive an identifier and basic profile information from Google, such as your name, email address, and profile image.
Content you create
We store the designs, pages, text, images, and other files you add to the Service; prompts and messages you send to the AI agent; and the sharing settings, invitations, and access you grant to collaborators. This content is stored so that you can return to it, sync it across devices, and share it as you choose.
Usage and technical information
We record information about how the Service is used, including designs created, opened, and exported; plan and credit usage; timestamps; IP address; browser and device type; and diagnostic or error logs. This helps us operate the Service, prevent abuse, and diagnose problems.
Billing information
Paid plans are processed by Bachs, our payment provider. Bachs collects and processes your payment details. We receive subscription status, plan and billing interval, invoice, payment, and refund metadata, and limited customer identifiers. We do not receive or store your full card number.
3. Browser storage
The Service uses browser storage to keep you signed in and to make the editor work reliably. A refresh token is stored in local storage so that a page reload can restore your session. Short-lived sign-in state for Google is kept in session storage and cleared after the callback completes. Your theme preference, local editor state, and locally cached designs or assets may also be stored in your browser.
We do not use advertising cookies, and we do not run third-party analytics trackers on the Service. You can clear browser storage through your browser settings; clearing it will sign you out and may discard unsaved local work.
4. How we use information
We use the information we collect to:
- create and secure accounts, authenticate you, and restore your session;
- store, sync, render, export, and share the work you create;
- run AI features, including sending the prompts and content you choose to include;
- manage plans, credits, subscriptions, invoices, and refunds;
- send transactional email such as password resets and account notices;
- detect abuse, enforce our terms, and keep the Service secure;
- debug errors, measure reliability, and improve the product; and
- comply with legal obligations and respond to lawful requests.
We do not sell your personal information, and we do not use your content to train our own models.
5. Legal bases
Where the General Data Protection Regulation or comparable law applies, we rely on these legal bases:
- Contract — to provide the Service you asked for, including your account, designs, collaboration features, and paid plan.
- Legitimate interests — to secure the Service, prevent abuse, diagnose failures, and improve how it works, balanced against your rights.
- Consent — where we ask for it, including optional integrations and processing that requires consent under local law. You may withdraw consent at any time.
- Legal obligation — to keep records, respond to lawful requests, and meet tax and accounting duties.
7. AI features
When you use the AI agent, the prompts you write and the content you include as context are sent to third-party model providers so they can generate a response. Those providers process the request under their own terms and privacy policies. Only include information you are comfortable sharing with those providers.
AI output can be inaccurate, incomplete, or similar to output generated for someone else. Review it before you rely on it or publish it.
8. Retention
We keep account information and content for as long as your account is active. If you delete your account or ask us to delete specific information, we remove it from active systems, and it will be overwritten or expire from backups within a reasonable period.
We may retain limited records for longer where the law requires it, such as billing, tax, and audit records, or where needed to resolve disputes, enforce agreements, or prevent fraud. Diagnostic logs are kept for a shorter period.
9. Security
We use technical and organisational measures designed to protect your information, including encryption in transit, hashed passwords, short-lived access tokens, and access controls on production systems. No system is completely secure, and we cannot guarantee that unauthorised access will never occur. Keep your password confidential and tell us promptly if you believe your account has been compromised.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your information; to restrict or object to certain processing; to withdraw consent; and to receive your information in a portable format. You may also have the right to complain to your local data protection authority.
If you are a California resident, you may request to know what personal information we collect and how we use it, request deletion or correction, and request that we not sell or share your personal information. We do not sell personal information or share it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
To exercise a right, email hello@stylo.design. We may need to verify your identity before acting on a request, and some rights are subject to exceptions under applicable law.
11. Children
The Service is not directed to children under 13, and you may not create an account if you are under 13. Where local law sets a higher age for consent to online services, such as 16 in parts of the European Economic Area, that age applies. If we learn that a child has provided personal information in violation of this section, we will delete it.
12. International transfers
Stylo and our service providers may process information in countries other than the one where you live, including the United States. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses, and you can contact us for more information about those safeguards.
13. Changes to this policy
We may update this policy as the Service changes. When we do, we will revise the date at the top of this page. If a change materially affects how we handle your information, we will provide additional notice, such as an email or an in-product message, before the change takes effect.
14. Contact
Questions about this policy or your information? Email hello@stylo.design.