Legal Information

Information We Collect

ColorIndicator is committed to protecting your privacy. We collect minimal information necessary to provide our services:

• Images you upload for color analysis (processed transiently by our analysis service)
• Your account identity, such as your display name, verified email address, and profile image
• Optional profile details you choose to add: role, primary goal, experience level, interests, website or portfolio URL, and bio
• Your communication choices and a record of when those choices change
• API key usage and quota records when you use the developer API
• Usage analytics to improve our service (anonymized)
• Optional feedback and contact information you provide

How We Use Your Information

• To provide color analysis services
• To personalize your private account and dashboard experience
• To improve our algorithms and user experience
• To respond to your inquiries and support requests
• To send transactional account, security, and service messages needed to operate your account
• To send optional product, research, or collaboration messages only when you explicitly enable the relevant choice

Communication Choices

Creating an account or signing in with Google does not subscribe you to marketing messages. Product updates and research or collaboration messages are separate, optional choices that are off by default. They are also separate from transactional account, security, and service emails. You can withdraw either optional permission at any time from your Account page or through the unsubscribe option in an email; the latest recorded choice becomes the current state.

Data Protection

We implement appropriate security measures to protect your information. Uploaded image bytes are sent to our analysis service, processed transiently, and are not intentionally retained after the analysis completes. Extracted palette data, without the source image, may be stored for signed-in users to provide private analysis history and when you choose to create a shareable result.

Service Providers

We use carefully selected providers to operate ColorIndicator, including Clerk for authentication, Vercel for hosting and application runtime, Neon for managed PostgreSQL data storage, and Resend for transactional application emails and communications you explicitly choose to receive. These providers process information only as needed to deliver their services to us.

Retention, Account Deletion, and Anonymization

While your account is active, we retain the account profile, optional preferences, saved analysis results, API access records, and consent history needed to provide and secure the service. When Clerk notifies us that an account has been deleted, we mark the local profile as deleted, clear its verified email, display name, and avatar, delete its optional preferences and saved analysis results, and revoke its API keys.

Account deletion also records a withdrawal for any optional communication permission that was still active. We retain the consent event history as an audit record, but replace its email address with a non-deliverable anonymous value so it can no longer be used to contact the deleted user.

Separate support, contact, API beta application, security, fraud-prevention, dispute, or legally required records may need to be retained according to their purpose. A fixed retention period for those audit and operational records has not yet been set and will be finalized through a legal and data-minimization review rather than assumed here. You may contact us to request deletion or clarification about a specific record.

Your Rights

You have the right to request access to, correction of, or deletion of personal information we have about you, subject to records we must retain for security, audit, dispute, or legal reasons. You can update profile and communication choices from your Account page, withdraw optional communication permissions there at any time, or contact us if you need assistance with access, deletion, or another privacy request.