Privacy
In force since 2026-10-26.
The short version: we keep your email address so your account and credits have an owner, and we keep the art you upload so we can turn it into a font and so you can change that font later. We do not sell any of it, and we do not train models on your images.
Who is responsible
vanBerloDevelopments, at Maasboulevard 299, 5237 WT 's-Hertogenbosch, Netherlands, is the controller of the personal data described here. Full company details are on the legal page. For anything about your data, email sam.vanberlo@vanberlodevelopments.com.
What we collect, and why we are allowed to
| What | Why | Legal basis |
|---|---|---|
| Your email address | To create the account your credits belong to, and to send you your font. | Performance of the contract you asked for |
| Art you upload | To generate the character set, and to keep with the font so you can change it later. It is the input to the thing you asked for, and the only copy of it. | Performance of the contract |
| The fonts and files we generate | So they are in your account when you come back for them. | Performance of the contract |
| Font creation and editing history | Private copies of generation, import and edit inputs, including your instructions and reference images, character mappings, attempt images, validation decisions and technical results, so we can investigate failed or incorrect fonts. Account-wide daily counters pause AI edits after repeated rejected instructions or failed attempts. | Performance of the contract |
| Developer API keys, connected AI tools and usage | Key names and hashes, connected app identifiers and permissions, request times, endpoint templates, statuses, durations and generation charges, so you can secure your integration and track its use. OAuth codes and tokens are stored as hashes. Connections can be revoked in your developer dashboard and are deleted with your account. Short-lived request counters use account identifiers and hashed network addresses to prevent abuse and are periodically removed after expiry. The request log does not contain your API key, uploaded art or prompts. | Performance of the contract |
| Payment details | To take payment, including automatic refills if you enable them. We keep your refill settings, authorization and payment references. Card numbers go to our payment provider and never reach our servers. | Performance of the contract, and a legal duty to keep the records |
| Product news and offers | Product emails are enabled by default for accounts. You can turn them off in your account or unsubscribe from any product email. | Explicit consent where you have given it. Default subscription is not a record of consent. |
| Technical errors, account ID and email when signed in | Sent to Sentry so we can diagnose failures and help the affected account. We do not attach uploaded artwork or record your screen. | Our legitimate interest in keeping the service reliable and resolving problems |
| Support messages and your reply email | To answer your question or resolve a problem. Messages are delivered to our support mailbox through Resend. Contacting support does not subscribe you to product emails. | Our legitimate interest in answering requests for help |
| Font feedback you choose to submit | Your selected result, problem, project type, app and optional written answer help us improve the tools. We remember when a question was shown, answered or dismissed so we do not keep asking. Project-purpose answers stay with your account; font-specific answers are also removed when that font is deleted. All answers are included in your account data export and removed on account deletion. Written answers are not sent to Google Analytics. Please do not include sensitive personal information. | Our legitimate interest in understanding and improving the service through voluntary feedback |
Marketing is separate from delivery on purpose. Making your account and sending you the font you just made is service, and it happens whether or not you want to hear from us again. Product emails are enabled by default, and turning them off does not affect your account, credits or fonts.
If you allow analytics, we measure page visits, tool actions, observed exports and verified purchases/refunds. We connect these using a random account identifier, never your email, font names, artwork or prompts. We store your first observed landing/source and latest consented checkout session. This may not be your original visit. Refusing or withdrawing analytics does not change your account, credits or email preference. Withdrawal stops new collection and removes these account links and queued events; previously received aggregate reports are not rewritten.
We record explicit changes to your email preference, including their time, source and wording. Default inclusion is recorded separately from explicit consent. Every product email includes an unsubscribe link that works without login. Complaints and permanent delivery failures block further marketing. We retain limited permission evidence and hashed delivery suppression records to document the basis used for sending and prevent further unwanted contact, including after account deletion. This processing supports our legitimate interest in honoring your choices.
Who else touches it
If you connect an AI tool, that tool can receive your font data and files within the permissions you approve. Its provider handles that data under its own privacy policy. Disconnecting stops future access; it does not remove copies already received by that tool.
Running this service means other companies process some of your data on our behalf. They act on our instructions and may not use it for their own purposes.
| Who | What they do | Outside the EEA? |
|---|---|---|
| Authentication and hosting (Google Cloud and Firebase) | holds your account, your uploaded art and the fonts made from it | Yes |
| Payments (Stripe) | takes the payment and holds the card details, which never reach us | Yes |
| AI processing providers | turn your uploaded art into a character set, generate character edits and check your edit instructions before generation | Yes |
| Email delivery (Resend) | sends the welcome message that carries your font and verifies your address | Yes |
| Visitor analytics (Firebase Analytics, by Google) | counts visits, and stores an identifier on your device to do it | Yes |
| Error tracking (Sentry) | records technical errors, including account ID and email when signed in, so we can diagnose failures and help the affected account | No |
Data that leaves Europe
Some of the companies above are based outside the European Economic Area, so your data is transferred there. Those transfers rely on the safeguards the law provides for them, which for our providers means the European Commission's standard contractual clauses or an adequacy decision covering the country in question. You can ask us which applies to a particular provider and we will tell you.
We do not train on your art
Your uploads are used to make and troubleshoot your font. They are not used to train models, ours or anybody else's, and they are not sold, licensed or shared for advertising. This is also written into the licence, which is the version that binds us.
How long we keep it
| What | How long |
|---|---|
| Private font generation and edit history, instructions, validation decisions and daily edit-limit records, including unsuccessful attempts | until account deletion; included in your data export |
| Optional analytics account attribution and first observed export | until analytics permission is withdrawn or the account is deleted |
| Analytics purchase delivery queue | up to 30 days; removed sooner on withdrawal or account deletion |
| Email preferences and consent history | until account deletion |
| Minimal proof for attempted marketing emails | 5 years after the attempt; recipient email is stored as a hash |
| Marketing delivery suppression | a hashed email address is retained while we operate the mailing service to prevent further unwanted mail |
| Automatic refill settings | until account deletion; payment authorizations and attempts are retained with financial records |
| Your account and email address | until you delete the account |
| Art you upload | kept with the font it made, so you can edit that font later; deleted with your account |
| Fonts you generate | for as long as your account exists; deleted with it, files included |
| Payment and invoice records | 7 years, because Dutch tax law requires it |
Deleting your account does not delete the invoices. Dutch law requires business records to be kept for seven years, and that duty outlives a request to erase, so those records stay alongside the limited email evidence and suppression records described above. Other account data is removed.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to what we are doing with it, or take it elsewhere. Email sam.vanberlo@vanberlodevelopments.com and we answer within a month. You can turn off product emails at any time without giving a reason, and it does not affect anything else.
If you think we have handled your data badly, you can complain to us first, and you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) whether or not you come to us first.
Cookies, and how we count visits
We count visits using Firebase Analytics (Google), which stores an identifier on your device. Nothing is measured until you say yes, saying no is one click and costs you nothing, and you can change your mind at any time.
Your theme choice is remembered in your own browser and never leaves it. When you sign in to the app, a cookie keeps you signed in, which is the kind of cookie that needs no permission because without it the thing you asked for does not work.
Because our analytics store something on your device, you are asked before anything is measured, and nothing is measured if you say no. You can change that answer whenever you like, right here:
We also record technical errors, so that when something breaks we find out from the software rather than from you. Those reports are about what the code did, and we configure them not to carry the contents of your uploads.
Changes
If this policy changes in a way that affects you, we say so rather than quietly editing the page. The date at the top is the one to check.