Privacy.
What we store, how long we keep it, and what we don’t do with it. See also Terms and Refunds.
What we store about you
The only identifying data tied to a studio is your email and (optionally) the studio name you’d like printed on your listings. We don’t ask for an address, a phone number, or a real name. Passwords are stored salted and hashed; we cannot read them.
Your records and generated files
The patterns, testers, swatches, milestones, and generated images you create are stored on your behalf so your gallery survives a browser refresh. They are scoped to your studio and never returned in another customer’s requests.
Generated images live in private object storage and are served via short-lived signed URLs — anyone without a fresh signed link can’t reach the file.
We do not sell or train on your data
We never sell account data, never share it for advertising, and never use your records, swatches, or generated output to train models. The AI providers we route generations through do not retain your inputs for training under their commercial API terms.
Sessions and cookies
A single HTTP-only session cookie is set when you sign in. It contains a random session identifier — nothing else. No analytics, advertising, or third-party tracking cookies are set by Vortle.
Payments
Top-up payments are processed by a PCI-compliant payment processor. Card data is never sent to or stored by Vortle; we only see the amount, currency, and a token identifying the order so we can credit your wallet.
Your rights
Write to studio@vortle.example to export your records, request deletion of your studio, or ask a privacy question. We respond within a working day and complete export or deletion within thirty days.