Privacy Policy
What we collect when you use SVGMill, why we keep it, and how to have it deleted.
SVGMill ("we") runs the website at svgmill.com, the SVGMill API and the SVGMill MCP server. This policy covers all three.
Your images
- Files are deleted after 30 days. The images you upload and the files we make from them are stored so you can preview and download them, then deleted 30 days after the conversion.
- Uploads are never used to train any model. Your images are used only to make your files.
- We learn only from failure records. When a conversion fails we keep the error code, the image's size and format, the settings and timings, and no pixels. We use these records to find and fix problems in the tracer.
What we collect
- Your email address, to create your account and send sign-in links, receipts and usage notices.
- Conversion records: when you converted, the file name, settings, formats downloaded and credits used. These stay in your history after the files themselves are deleted.
- API keys, stored only as a one-way hash, with a label and when each was created and last used.
- Payment details, handled by Stripe. We receive the purchase, the amount and the invoice, never your full card number.
- IP addresses, stored only as a truncated hash and used to apply rate limits.
Cookies
We set one cookie, sm_session, when you sign in. It keeps you signed in for up to 30 days, is marked HttpOnly and Secure, and is not used for tracking. We do not use advertising or analytics cookies.
Who processes data for us
| Provider | What for |
|---|---|
| Cloudflare | Hosting, the database and file storage |
| Stripe | Payments, invoices and tax |
| Resend | Sending email |
We do not sell your data or share it with anyone else, unless the law requires it.
Deleting your account
You can delete your account from your account page, or with DELETE /v1/account using your API key. This deletes your account, your API keys, your sessions and your stored files, and cancels any plan. Records of payments and credit use are kept for accounting, with your identity removed.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Contact us at the address on this page and we will reply within 30 days.
Changes
If we change this policy in a way that matters, we will email account holders before the change takes effect.